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(54) A distributed network computing system 



(57) The server computer (15) is provided with an 
access section (151), a security section (152), a appli- 
cation function conversion section (153), application 
service supply section (154) and a remote agent (155) 
therein. The data temninals (13) is provided v^ith a local 
agent (131), client software (132), key management cli- 
ent (1 33), enciphering section (1 34) therein. In this way, 
the server computer (15) and the data terminals (13) 
connected through a network (14) can realize a coun- 
termeasure for the circuit breakdown and an improve- 
ment of the security function regarding the data cache 
function and vicarious login. 
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Description 

BACKGROUND OF THE INVENTION 

[0001] The present invention relates to a distributed 
network computing system, more particularly to a dis- 
tributed network computing system, wherein a plurality 
of different kinds of communication networks such as a 
public communication network, wired LAN (Local Area 
Network), wireless LAN, etc. are involved together, and 
wherein application services of various kinds of applica- 
tion software are supplied to the various kinds of termi- 
nals connected to these networks such as personal 
computers(PC), portable PC, which are different in 
processing capacities, to data exchange apparatus 
used for the system and to the data exchange method 
used for the system and the memory media, in which 
the method is stored and which can be read out by a 
computer. 

[0002] In the conventional data processing by a com- 
puter, a concentrated processing system, wherein a plu- 
rality of terminal equipment are connected to a main 
computer, has been the mainstream. In the meantime, 
in the case of a distributed network computing system, 
a plurality of computers are connected with each other 
by a network and resources that the respective comput- 
ers own, are commonly used, and the effective process- 
ing can be performed. An environment, wherein the ap- 
plication software are processed by different types of the 
computers, is called as a distributed computing environ- 
ment. 

[0003] In the network, wherein the distributed comput- 
ing is realized, it is not necessary for the users to know, 
where are programs and data. As the network functions 
theoretically as if the whole network is a computer, the 
users can utilize the necessary data and functions in 
their operating situation. 

[0004] As portable data terminals, such as a personal 
digital cellular and a personal handyphone system) be- 
come popular, the mobile computing has become real- 
istic. For example, it has been made possible, easily to 
call up the mail outside of the company and to refer to 
the information of WWW (World Wide Web) by a com- 
bination of PHS and Notebook Personal computer. 
However, in the mobile environment, there has been a 
limitation that the same maneuverability as in the office 
cannot be expected out of the office. 
[0005] Such limitations are that the communication is 
interrupted during the communication, or that the dis- 
play screen of the mobile terminals are uncomfortable 
to see because of its small size. Under the mobile com- 
puting environment, a part of the work, which can be 
executed only in the office, can be executed out of the 
office, time can be saved and a quick transaction can 
be realized. As an application for the mobile computing 
at its early stage, checking of the electronic nnail and 
confirmation of notice board can be considered. Further- 
more, a work that can be executed in the office upon 



return to the office in order to refer the data available 
only in the office, can be executed at the office of the 
customer. As explained in the above, not only the works 
can be executed out of the office as if works are execut- 
5 ed in the office, but also the form of the works which 
could not be realized in the past environment, can be 
realized. 

[0006] Now then, as for the form of the system in case 
of the mobile computing, several models can be consid- 
ered depending upon the main portion of the communi- 
cation. In this case, a model, in which the client takes 
the initiative and the server computer in the office is uti- 
lized by a mobile terminal, is assumed. Besides this 
form, a form, in which the server computer controls its 
?5 terminals depending the information from the mobile ter- 
minal, as well as a form in which the server computer is 
used as a hub station that connect the mobile terminals 
each other, can be considered. 

[0007] On the other hand, there are many restrictions 
20 for accessing to the data in the office, as the mobile com- 
munication is used. At the present time, problems such 
as circuit speed, circuit quality circuit troubles and com- 
munication rates can be considered. 
[0008] Though a conversion of the attribute data, 
25 which are subjected to a control in a network control sys- 
tem, as shown in Laying-Open HeiS- 16500, and a con- 
version of the application program for telephone and da- 
ta communication as shown in USA patent 5,572,675, 
can be considered, these prior arts disclose nothing to 
30 solve the problems, which arise in the form of the system 
for mobile computing. 

[0009] Furthermore under the environment of network 
computing such as mobile computing as described in 
the above, for example, when the circuit which was con- 

55 necting the terminal and the server computer, was bro- 
ken by any reason, the work that had been done be- 
tween the terminal and the server computer before the 
breakdown became insignificant, and it was necessary 
to repeat the same work. Also, under the net work com- 

40 puting environment such as the mobile computing de- 
scribed in the above, when a data processing job, which 
required a long time, was instructed from a terminal to 
the server computer, the terminal had to wait with the 
circuit being connected, until the processing of the 

^5 aforementioned job was finished by the server compu- 
ter. So that, the communication rate became high. Be- 
sides, during the processing is executed, any other work 
could not be done on the side of the terminal, which was 
very inconvenient. Furthermore, the security was not 

50 perfect. Further problem is that, the user of the terminal 
was compelled to login (logon) every time, when the us- 
er tried to access to a desired server computer or an 
application software, which maneuverability was inferior 
and efficiency was not perfect. Furthermore, There were 

55 also cases in the prior art that it was very hard to login 
(logon) depending upon the type of the terminal used. 
There were also cases that it was impossible to access 
to or to login (logon) a desired server computer or an 
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application soltware depending upon the type of the ter- 
nninal. 

BRIEF SUMMERY OF THE INVENTION 

[0010] Therefore, the object ot the present invention 
is to dissolve the aforementioned problenns, and to have 
application services provided in accordance with the 
processing capacity of the respective ternninal equip- 
ment in an environment of the netw/ork, wherein various 
kinds of terminals are existing. Another object of the 
present invention is. to provide a distributed network 
computing system, a data exchange apparatus used for 
the said system, a data exchange method used for the 
said system and the memory media in which the said 
method is stored and which can be readout by a com- 
puter, which can provide an application service in ac- 
cordance with the communication capacities of the said 
infrastructures, even If a plurality of communication in- 
frastructures coexisteds in the environment. In other 
words, the object of the present invention is to dissolve 
the aforementioned problems and to have a work in the 
office continuously executed even in the environment of 
the mobile computing system, 

[0011] The another object of the present invention is 
to have a countermeasure properly taken, even when 
the communication is broken down during the commu- 
nication, and further to have the terminal equipment ef- 
fectively utilized even at the processing data which re- 
quire a long time, and to provide a economically excel- 
lent system and to attain a high security function and to 
improve the login (logon) function. 
[0012] In order to attain the said objects, the present 
invention is conceived as follows; 
[0013] (1) A distributed network computing system is 
provided which comprises an data processing appara- 
tus, which supplies an application service such as vari- 
ous application software, various kinds of terminals, 
which receive the application service from the said data 
processing apparatus, and a communication network, 
which connects said data processing apparatus and 
said terminals; wherein said data processing apparatus 
is provided with a data exchange device, and said data 
exchange device further comprises an access control 
means which controls the connection from the said ter- 
minals, a security control means which judges the cer- 
tification of said terminals with regard to said access 
means anda function converting means, which converts 
the contents of the application service to be supplied to 
said terminals based upon the data from said security 
control means to the format suitable for said terminals. 
[0014] According to another embodiment of, the 
present invention, a distributed network computing sys- 
tem comprising a data processing apparatus, which 
supplies an application service such as various applica- 
tion software, various kinds of terminals, which receive 
the application service from said data processing appa- 
ratus, and a communication network, which connects 



said data processing apparatus and said terminals is 
provided , wherein a network connecting means which 
connects the networks with each other and a data ex- 
change apparatus, which is provided in said network 
5 connecting means, are provided, and said data process- 
ing apparatus is provided with a data exchange appa- 
ratus, and data exchange apparatus further comprises 
an access control means which controls the connection 
from the said terminals, a security control means which 

10 judges the certification of the said terminal with regard 
to the said access means and a function converting 
means, which converts the contents of the application 
service to be supplied to said terminal based upon the 
data from the said security control means to the format 

75 suitable for said terminal. 

[0015] Also, according to the present invention, said 
access control means is characterized in that the control 
is executed so as to perform the processing by means 
of proper connection control system or a manual control 

20 system at said terminals. 

[0016] Furthermore, according to the present inven- 
tion, said security control means is characterized in that 
enciphering is performed by means of a proper system 
at said terminal, when an application service is to be 

^5 supplied. 

[0017] Furthermore, according to the present inven- 
tion, said security means is characterized in that by 
means of a proper system coding is performed at the 
same terminal, when the application service is supplied. 

30 [0018] Furthermore, according to the present inven- 
tion, said security control means is characterized in that 
said security control means, said access control means 
and said function converting means have a unified view 
regarding the accessing data terminal by issuing a new 

35 discriminator. 

[0019] Furthermore, according to the present inven- 
tion, said function converting means is characterized in 
that said function converting means is provided with a 
control means for data concerning said terminal and a 

40 means that controls the data regarding the interface with 
the application service and realizes a communication 
with the application service. 

[0020] Furthermore, according to the present inven- 
tion, said function converting means is characterized in 
45 that the data is converted into the form suitable to said 
terminal based upon the communication system used 
by the said terminal. 

[0021] According to the present invention, the work in 
the office can be performed continuously even in a mo- 

50 bile computing environment. In other words, a supply of 
an application service can be realized, depending upon 
the processing capacity of the respective terminals and 
a supply of an application service can be realized de- 
pending the communication capacity of the said infra- 

55 structure, even if a plurality of communication infrastruc- 
tures coexisted. 

[0022] (2) A distributed network computing system is 
provided which comprises a data processing apparatus. 
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which supplies an application service such as various 
application software, various kinds of terminals, which 
receive the application service from said data process- 
ing apparatus, and a communication network, which 
connects the said data processing apparatus and the 
said terminals., wherein said data processing apparatus 
is provided with a data exchange device, and said data 
exchange apparatus further comprises an access con- 
trol means which controls the connection from said ter- 
minals, a security control means which judges the cer- 
tification of said terminals with regard to the said access 
means and a function converting means, which converts 
the content of the said application service to be supplied 
to said terminals basing upon the data from said security 
control means to the format suitable for said terminals, 
a connection control means, which controls the connec- 
tion condition with said terminals so as to provide the 
service content converted by means of said function 
converting means depending upon the connection con- 
dition. 

[0023] According to another embodiment of the 
present invention a distributed network computing sys- 
tem is provided which comprises a data processing ap- 
paratus, which supplies an application service such as 
various application software, various kinds of terminals, 
which receive the application service from the said data 
processing apparatus, a communication network, which 
connects the said data processing apparatus and said 
terminals, a network connecting means which connects 
the networks with each other and a data exchange ap- 
paratus, which is provided in said network connecting 
means, wherein said data exchange apparatus further 
comprises an access control means, which controls the 
connection process from the terminals, a security con- 
trol means which judges the certification of said termi- 
nals with regard to the said access means, a function 
converting means, which converts said service content 
of the application service to be supplied to said terminal 
to the format suitable for said terminal equipment based 
upon the data from the said security control means, and 
a connection control means which controls the connec- 
tion condition with said terminals and provides the con- 
tent of the service converted by means of the said func- 
tion converting means based upon the said connection 
condition. 

[0024] Also, according to the present invention, said 
access control means is characterized in that the control 
is executed so as to perform the processing by means 
of proper connection control system or a manual control 
system at the said terminals. 

[0025] Furthermore, according to the present inven- 
tion, said security control means is characterized in that 
enciphering is performed by means of a proper system 
at said terminal, when an application service is to be 
supplied. 

[0026] Furthermore, according to the present inven- 
tion, said security control means is characterized in that 
said security control means, said access control means 



and said function converting means have a unified view 
regarding the access to said data terminals by issuing 
a new discriminator. 

[0027] Furthermore, according to the present inven- 
s tion, said function converting means is characterized in 
that said function converting means is provided with a 
control means of data concerning said terminal and a 
means that controls the data regarding the interface with 
the application service and realizes a communication 

^0 with application service. 

[0028] Furthermore, according to the present inven- . 
tion, said function converting means is characterized in 
that the data is converted into the form suitable to said 
terminal based upon the communication system used 

75 by the said terminal. 

[0029] Furthermore, according to the present inven- 
tion, said connection control means is characterized in 
that the interrupted data can be transmitted successive- 
ly from the interrupted position by the breakdown based 

20 upon the record of data conversion record and the 
record of the connection to said terminal. 
[0030] According to the present invention, the work in 
the office can be performed continuously even in a mo- 
bile computing environment. In other words, a supply of 

25 an application service can be realized depending upon 
the processing capacity of the respective terminals, and 
a supply of an application service can be realized de- 
pending the communication capacity of the said infra- 
structure, even if a plurality of communication infrastruc- 

30 tures are coexisted. 

Furthermore, according to the present invention, a prop- 
er countermeasure can be taken, even if in the case of 
breakdown when the communication is interrupted. In 
addition, in case of a data processing work which re- 

35 quires a long time, the terminal can be utilized effectlve- 

ty. 

[0031] (3) A distributed network computing system is 
provided which comprises a data processing apparatus, 
which supplies an application service such as various 
application software, various kinds of terminals, which 
receive the application service from said data process- 
ing apparatus, and a communication network, which 
connects said data processing apparatus and said ter- 
minals. The system is characterized in that said data 

45 processing apparatus is provided with a data exchange 
device, and that said data exchange apparatus further 
comprises an access control means which controls the 
connection from said terminals, a security control 
means which judges the certification of said terminals 

50 with regard to said access means and a function con- 
verting means, which converts the contents of the said 
application service to be supplied to said terminals 
based upon the data from said security control means 
to the format suitable for the saidterminals, a connection 

55 control means, which controls the connection condition 
so as to provide the service contents converted by 
means of said f unctbn converting means depending up- 
on the connection condition, and a control means, 
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through which said terminal is enabled to readout the 
specific data, when said terminal is in connection 
through the said network and also said terminal satisfies 
the specified conditions to request an access to the 
specified data 5 
[0032] According to another embodiment of the 
present invention, a distributed network computing sys- 
tem is provided which comprises a data processing ap- 
paratus, which supplies an application service such as 
various application software, various kinds of terminals, to 
which receive the application service from said data 
processrng apparatus, and a communication network, 
which connects said data processing apparatus with 
said terminals, and a data exchange apparatus, which 
is provided in said data processing apparatus, wherein 15 
said data exchange apparatus further comprises an ac- 
cess control means, which controls the connection proc- 
ess from the terminals, a security control means which 
judges the cenificaiion of said terminals with regard to 
said access conirol means, a function converting 20 
means, which converts said service contents of the ap- 
plication service to be supplied to the said terminal to 
the format suitable for the said terminals based upon the 
data from the said security control means, and a con- 
nection control means which controls the connection 2S 
condition with said terminals and provides the contents 
of the service converted by means of the said function 
converting means based upon said connection condi- 
tion, and a control means, through which said terminal 
is enabled to readout the specific data, when said ter- 30 
minal is in connection through said network and also 
said terminal satisfies the specified conditions to re- 
quest an access to the specified data. 
[0033] According to the present invention, said ac- 
cess control means is characterized in that the control 35 
is executed so as to perform the processing by means 
of a proper connection control system or a manual con- 
trol system at the said terminals. 
[0034] According to the present invention, said secu- 
rity control means is characterized in that enciphering is 40 
performed by means of a proper system at said terminal, 
when an application service is to be supplied. 
[0035] According to the present invention, said secu- 
rity control means is characterized in that said security 
control means, said access control means and said 45 
function converting means have a unified view to the ter- 
minals accessing to the network, by issuing a new iden- 
tifier 

[0036] According to the present invention, said func- 
tion converting means is characterized in that said f unc- so 
tion converting means is provided with a means that 
controls the information regarding said terminals and a 
means which controls the information regarding the in- 
terface with the application service and realizes the 
communication with the application service. 55 
[0037] According to the present invention, said func- 
tion converting means is characterized in that the data 
is converted into the fomn suitable to said terminal based 



upon the communication system used by the said ter- 
minal. 

[0038] According to the present invention, said con- 
nection control means is characterized in that the inter- 
rupted data can be transmitted successively from the 
interrupted position at the breakdown based upon the 
record of data conversion record and the record of con- 
nection condition to the said terminal. 
[0039] According to the present invention, said data 
exchange apparatus and at least one of the said termi- 
nal are provided with a remote agent function, and said 
data exchange apparatus is characterized in that said 
data exchange apparatus and said terminal are enabled 
to execute a data cache function. 
[6040] According to the present invention, the work in 
the office can be performed continuously even in a mo- 
bile computing environment. In other words, a supply of 
an application service can be realized, depending upon 
the processing capacity of the respective terminals, and 
a supply of an application service can be realized de- 
pending the communication capacity of the said infra- 
structure, even if a plurality of communication infrastruc- 
tures are coexisted. 

Furthermore, according to the present invention, a prop- 
er countermeasure can be taken even if in the case of 
breakdown when the communication is interrupted. In 
addition, in case of a data processing work which re- 
quires a long time, the terminal can be utilized effectively 
and is economically excellent, and the security function 
can be improved. 

[0041] (4) A distributed network computing system is 
provided which comprises a data processing apparatus, 
which supplies an application service such as various 
application software, various kinds of terminals, which 
receive the application service from said data process- 
ing apparatus, and a communication network, which 
connects said data processing apparatus and said ter- 
minals. The system is characterized in that said data 
processing apparatus is provided with a data exchange 
device, and that said data exchange apparatus further 
comprises an access control means which controls con- 
nection from said terminals, a security control means 
which judges the certification of said terminals with re- 
gard to said access means and a function converting 
means, which converts the contents of the said applica- 
tion service to be supplied to said terminals based upon 
the data from said security control means to the fomnat 
suitable for the said terminals, a connection control 
means, which controls the connection condition so as 
to provide the service content converted by means of 
said function converting means depending upon the 
connection condition, a control means, through which 
said terminal is enabled to readout the specific data, 
when said terminal is in connection through the said net- 
work and also said terminal satisfies the specified con- 
ditions to request an access to the specified data, and 
a control means which executes a certification process- 
ing by means of a proper system and controls the login 
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(logon) processing in accordance with the terminals by 
nneans ot a proper nnethod depending upon the result of 
the certification process. 

[0042] Furthermore, according to the present inven- 
tion a distributed network computing system is provided 
which comprises a data processing apparatus, which 
supplies an application service such as various applica- 
tion software, various kinds of terminals, which receive 
the application service from the said data processing ap- 
paratus, and a communication network, which connects 
said data processing apparatus with said terminals, and 
a data exchange apparatus, which is provided in the 
said network connecting means, wherein said data 
processing apparatus further comprises an access con- 
trol means, which controls the connection process from 
the terminals, a security control means which judges the 
certification ot said terminals with regard to the access 
control means, a function converting means, which con- 
verts said service contents of the application service to 
be supplied to the said terminal to the format suitable 
for the said terminals based upon the data from the said 
security control means, a connection control means 
which controls the connection condition with the said ter- 
minals and provides the contents of the service convert- 
ed by means of the said function converting means 
based upon said connection condition, a first control 
means, through which said terminal is enabled to read- 
out the specific data, when said terminal is in connection 
through the said network and also said terminal satisfies 
the specified conditions to request an access to the 
specified data, and a second control means which exe- 
cutes a certification processing by means of a proper 
system and controls the login (logon) processing in ac- 
cordance with the terminals by means of a proper meth- 
od depending upon the result of the certification proc- 
ess. 

[0043] According to the present invention, said ac- 
cess control means is characterized in that the control 
is executed so as to perform the processing by means 
of proper connection control system or a manual control 
system at the said terminals. 

[0044] Furthermore, according to the present inven- 
tion, said security control means is characterized in that 
enciphering is performed by means of a proper system 
at the said terminal, when an application service is to be 
supplied. 

[0045] According to the present invention, said secu- 
rity control means is characterized in that said security 
control means, said access control means said function 
converting means have a unified view to the terminal 
accessing to the network by issuing a new identifier. 
[0046] According to the present invention, said func- 
tion converting means is characterized in that said func- 
tion converting means is provided with a control means 
of the concerning the said terminals and a means that 
controls the information regarding the interface with the 
application service and realizes a communication with 
the application service. 



[0047] According to the present invention, said func- 
tion converting means is characterized in that the data 
are converted into the form proper for the terminal de- 
pending upon communication system that said terminal 
5 utilizes. 

[0048] According to the present invention, said con- 
nection control means is characterized in that the inter- 
rupted data can be transmitted successively from the 
interrupted position at the breakdown based upon the 
^0 record of data conversion record and the record of con- 
nection condition to the said terminal. 
[0049] According to the present invention, said data 
exchange apparatus and at least one of the said termi- 
nal are provided with a remote agent function, and said 
f5 data exchange apparatus is characterized in that said 
data exchange apparatus and the said terminal is ena- 
bled to execute a data cache function. 
[0050] According to the said constitution, the work in 
the office can be performed continuously even in a mo- 
bile computing environment. In other words, a supply of 
an application service can be realized depending upon 
the processing capacity of the respective terminals and 
a supply of an application service can be realized de- 
pending the communication capacity of the said infra- 
structure, even if a plurality of communication infrastruc- 
tures are coexisted. 

Furthermore, according to the present invention, a prop- 
er countermeasure can be taken even if in the case of 
breakdown when the communication is interrupted. In 
addition, in case of a data processing work which re- 
quires a long time, the terminal can be utilized effectively 
and economically with, the security function improved. 
The login (logon) function also and the maneuverability 
can be also improved. 

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF 
THE DRAWINGS 

[0051] FIG. 1 is a block diagram, which shows the 
idea of the distributed network computing system ac- 
cording to the first embodiment of the present invention. 
[0052] FIG. 2 is a block diagram, which shows an ac- 
cess section according to the embodiment of the 
present invention. 

[0053] FIG. 3 is a block diagram, which shows a se- 
curity section according to the said embodiment of the 
present invention. 

[0054] FIG. 4 is a block diagram, which shows an ap- 
plication function converting section according to the 
said embodiment of the present invention. 
[0055] FIG. 5 is a block diagram, which shows a data 
processing section for respective terminals according to 
the embodiment of the present invention. 
[0056] FIG. 6 is a block diagram, which shows an ap- 
plication function interface section according to the em- 
bodiment of the above invention. 

[0057] FIG. 7 is a block diagram, which shows a con- 
version communication section according to the said 
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embodiment of the present invention. 

[0058] FIG. 3 is a flow chart, which shows an access 

process by the data terminal on the side of the server 

computer according to said embodiment of the present 

invention. 

[0059] FIG. 9 is a flow chart, which shows a data ex- 
change process on the side of the server computer ac- 
cording to said embodiment of the present invention. 
[0060] FIG. 10 is a flow chart, which shows an enci- 
phering process on the side of the server computer ac- 
cording to said embodiment of the present invention. 
[0061] FIG. 1 1 is a flow chart, which shows a concept 
of the network computing system according to the em- 
bodiment of the present invention. 
[0062] FIG. 1 2 is a flow chart, which shows a process 
flow mainly by the conversion communication section, 
and more particularly, which shows the data flow from 
the data terminals to the application service supply sec- 
tion according to said embodiment of the present inven- 
tion. 

[0063] FIG. 1 3 is a flow chart, which shows a process 
executed mainly by the conversion communication sec- 
tion, and more particularly, which shows a data flow from 
the application service supply section to the data termi- 
nals according to the embodiment of the present inven- 
tion. 

[0064] FIG. 1 4 is a block diagram, which shows a con- 
cept of the network computing system according to the 
second embodiment of the present invention. 
[0065] FIG. 1 5 is a flow chart, which shows a process 
of issuing a request according to the embodiment of the 
present invention. 

[0066] FIG. 1 6 is a flow chart, which shows a process 
of response reception according to the embodiment of 
the present invention. 

[0067] FIG. 17 is a flow chart, which shows an asyn- 
chronous access process according to the embodiment 
of the present invention. 

[0068] FIG. 18 is a flow chart, which shows a process 
for changing a terminal halfway of a communication ac- 
cording to the embodiment of the present invention. 
[0069] FIG. 19 is a block diagram, which shows the 
concept of the network computing system according to 
the third embodiment of the present invention. 
[0070] FIG. 20 is a flow chart, which shows a data 
cache processing according to the embodiment of the 
present invention. 

[0071] FIG. 21 is a flow chart, which shows a data en- 
ciphering and a complex processing according to the 
embodiment of the present invention. 
[0072] FIG. 22 is a flow chart, which shows a process- 
ing by an enciphering system for local data according to 
the embodiment of the present invention. 
[0073] FIG. 23 is a drawing, which shows the man- 
agement items for personal data according to the fourth 
embodiment of the present invention. 
[0074] FIG. 24 is a drawing, which shows the relation 
between the name for login and verification process ac- 



cording to the embodiment of the present invention. 
[0075] FIG. 25 is a drawing, which shows the verifica- 
tion process according to the embodiment of the present 
invention. 

s [0076] FIG. 26 is a flow chart, which shows vicarious 
execution of login process according to the embodiment 
of the present invention. 

DETAILED DESCRIPTION OF THE PREFERRED 
TO EMBODIMENTS 

[0077] Hereinafter, the embodiments of the present 
invention are described by referring to the drawings. 

^5 (First embodiment) 

[0078] FIG. 1 is a drawing, which shows a concept of 
the distributed network computing system according to 
the first embodiment of the present invention. 

20 [0079] The data terminals, 11,12,13, which are used 
outdoors (out of the office), are connected through net- 
work 1 4 to the server computer 1 5 and are utilized as a 
network computing system outside of the office. Mean- 
while, the data terminal 11 is a telephonic data terminal, 

^5 such as a smart-phone, the data terminal 12 is a porta- 
ble data terminal such as a PDA (Personal Digital As- 
sistant) and the data terminal 1 3 is a portable personal 
computer (PC). Meantime, the users of these terminals 
may perform desired works using desktop-type termi- 

30 nals which are indicated by the terminal 1 7 and the ter- 
minal 18, instead of the terminals 11,12 and 13, when 
they are in the office or indoors such as building or 
house. 

[0080] The network 1 4. to which the data terminals 1 1 , 
35 12 and 13 are connected. Is a public telephone circuit, 
a private telephone circuit, or a network infrastructure 
such as INTERNET Physically there are both cases in 
which the network 14 is wired and wireless. Further- 
more, this network 14 is connected to the server com- 
40 puter 15 installed indoors. 

[0081] The server computer 1 5 is connected with flop- 
py disc devices (FDD) 19, hard disc devices (HDD) 20 
and/or CD-ROM devices 21 as external memories for 
storing various kinds of application programs and data 
45 and is further provided with an access section 151, a 
security section 152, an application function conversion 
section 153 and an application service supply section 
154 within the computer. 

[0082] Hence, the access section 151 performs con- 
50 trols for the access from the data terminals by means of 
dial-up. The security section 152 performs security con- 
trol function such as verification of the users, who try to 
access through the network 14. 

[0083] The application function conversion section 
55 1 53 performs the conversion according to attribute data 
of the kind of data which the users of data terminals may 
utilize. With this data conversion function, the users of 
the terminals may utilize the network computing system 
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by means of various kinds of data terminals and a net- 
work infrastructure. The application service supply sec- 
tion 154 realizes that the user of terminals receive sup- 
ply of the services from the network computing system. 
For example, there are group ware/data system includ- 
ing OA system, electronic mail, documentation data- 
base, group schedule management, and systems which 
utilize DBMS (Database Management System) such as 
an inventory management, etc. Meantime, the applica- 
tion service supply section 154 can be functioned so as 
to supply a plurality ot application services. 
[0084] The data terminals 17.18, which are connected 
to the server computer 15 through the network 16, are 
the ones which are used by the user of terminals, when 
they utilize the service function of the server computer 
15 in the office or indoors. Meanwhile, the network 16 
is physically a communication medium of a high reliabil- 
ity among the communication infrastructures, including 
wired LAN (Local Area Network), wireless LAN. infrared 
communication. Also, the users of data terminals 17,18 
may receive the services directly from the application 
service supply section 154, without passing through the 
access section 151, the security section 152 or the ap- 
plication function conversion section 153. 
[0085] Meantime, needless to say, though the server 
computer is shown as a one computer in FIG. 1 , the re- 
spective functions of the computer can be distributed in 
a plurality of computers. 

[0086] Meantime, when the network computing sys- 
tem is built up, there are several problems caused by 
the following matters. 

* to utilize various kinds of data terminals, 

* to utilize an unstable communication infrastructure, 

* to make the security function sure, 

* to utilize various kinds of application functions, 

* to use the login function effectively, 

[0087] The data conversion apparatus, which are 
used in the embodiment of the present invention to solve 
these problems will be described in detail. 
[0088] FIG. 2 is a drawing, which shows the concept 
of the internal constitution of the access section. For ex- 
ample, in the case of the protocol used generally today 
for dial-up service to the indoors server computer, there 
is a PPP (Point to Point Protocol). The access utilizing 
this PPP can be used by the data terminal 1 2 or the data 
terminal 1 3, however, can hardly be used by the terminal 
1 1 . This is due to the fact that the data processing func- 
tion, which controls the PPP protocol, is not hardly be 
provided as the data processing capacity of the terminal 
1 1 is relatively low, when the data processing capacity 
of the terminal 11 is compared with the ones of the data 
terminals 12, and 1 3, 

[0089] To more particularly explain, a case that only 
an access from the terminal by means of a non-pro- 
grammable control is possible, can be considered. 
Therefore, the non-programmable access section 1511. 



which enables a non-programmable access and the 
programmable access section 1512, which enables a 
programmable access such as PPP are provided in the 
access section 1 51 . Furthermore, as explained later, the 
5 access section 151 is provided with an interface function 
for the server computer to access the outside interface 
by communicating with the security section 1 52 and the 
application function conversion section 153 (internal 
communication within the server). In this connection, the 

10 access section 151 is provided with an internal commu- 
nication section (communication interface for inside) 
1513, which has an internal communication interface 
function for performing a communication with other 
components in the server computer 15 and a external 
communication section (communication interface for 
outside) 1514, which has an external communication in- 
terface function for performing communication outside 
of the server computer 15. Meanwhile, in case of the 
actual execution, an non-programmable access section 

20 1511 and a programmable access section 1512 may be 
provided with internal/external communication func- 
tions, so that the non-programmable access section 
1511 or the programmable access 1512 may execute 
internal communication or external communication in- 

25 dependently. Also, the said external communication 
section 1514 is provided with a communication port, by 
which one can know from what kind of data terminal ac- 
cess is performed. In other words, the port for the access 
from the data terminal 11 and the port for the access 

30 from the data terminals 12,13 are distinguished by the 
difference of the telephone numbers. Meantime, need- 
less to say, it is also possible to compose the server so 
that the kind of the data terminal can be judged at the 
access section 151 by discriminating the telephone 

35 number of the data terminal which is accessing, for ex- 
ample, by referring to an access discriminating data ta- 
ble, which is provided within the computer but not shown 
in the drawing, 

[0090] FIG. 3 is a drawing, which shows the internal 
40 constitution of the security section 152. The security 
section 152 is provided with a certification processing 
section (authentication processing section) 1521 , which 
processes the certification of the users and a code 
processing section (enciphering processing section) 
^5 1522, which enciphers the data in the network 14 and 
16 as well as the server computer 15. And also, in the 
security section 152, there is personal data manage- 
ment section (user data management section) 1523, 
which sets up and manages the personal data for certi- 
50 fication and the data for establishing the propriety of en- 
ciphering. 

Furthermore, the security section 152 is provided with 
an internal communication section (communication in- 
terface for inside) 1524, which is provided with an inter- 
ns nal communication interlace function for performing 
communications with the other components within the 
computer 15. Meantime, needless to say, it is also pos- 
sible to have the certification processing section 1521 
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or the code processing section 1522 provided with an 
internal communication function. 
[0091] Also, for the enciphering of the data, it is nec- 
essary to have the enciphering and deciphering func- 
tions between the both sides of the communication. As 
to the propriety of enciphering at the respective sections 
within the apparatus according to the embodiment of the 
present invention, the code processing section 1 522 is 
to manage the data. 

[0092] FIG. 4 is a drawing, which shows the internal 
constitution of the application function converting sec- 
tion 153. At the network computing system, which is a 
object of the embodiment of the present invention, there 
are various kinds of data terminals as shown in FIG. 1. 
(Data terminals 11, 12, and 13 are indicated in FIG. 1). 
Therefore, it is necessary to provide a communication 
system proper for the data terminal. For example, it is 
necessary to distinguish the attribute used by WWW 
(World Wide Web) from the attribute of the terminal for 
a certain non-programmable terminal system. For ex- 
ample, in case of the non-programmable terminal, it is 
necessary to supply the data from the application serv- 
ice supply section to display in accordance with the dis- 
play size and display capacity. Therefore, there is a data 
processing section for respective terminals (terminal da- 
ta management section) 1531 in the application function 
conversion section 153. Though the communication 
control systems and the data display systems are differ- 
ent according to the terminal used by users, the data 
processing section tor respective terminals 1531 is to 
absorb such differences. Meanwhile, in the case of an 
actual apparatus, data processing section for respective 
terminals 1531 can be realized by providing a data 
processing section for each attribute of terminals. Also, 
the data processing section for respective terminals 
1531 is provided with a communication interface func- 
tion for performing communication with the other com- 
ponents in the server computer 15, and performs com- 
munication with the access section 151 and the security 
section 152. 

[0093] Next, at the application function conversion 
section 1 53, the function to supply the service which de- 
sired by the user is realized by performing a communi- 
cation through a suitable system for the data terminals 
1 1 . 1 2, 1 3 and their control systems. For this purpose, the 
application service supply section 154 and an applica- 
tion function interface section 1532, which performs 
communications, are provided. Meantime, in the case 
that the application service supply section 154 is real- 
ized as a software, the application function interface 
section 1 532 can be realized as a software, in which API 
(Application Programming Interface) supplied by the ap- 
plication service supply section 154 is used. Also, the 
application function conversion section 153 is provided 
with a converting communication section 1533 in order 
to communicate data by means of a data processing 
section for respective terminals 1531 and an application 
function interface section 1532. The data processing 



section for respective terminals 1531 does not require 
any data regarding the application service supply sec- 
tion 154, and the application function interface section 
1532 does not require the data regarding the attribute 
5 of the terminals. Furthermore, application function con- 
version section 153 is provided with a temiinal data 
management section (terminal detail information man- 
agement section) 1 534. The terminal data management 
section 1 534 possesses the detailed data regarding the 

^0 data terminals, and the data processing section for re- 
spective terminals 1531 performs the data processing 
basing upon the said data Meantime, in the case of the 
actual apparatus, when it is provided as a software, the 
data processing section for respective terminals 1531 

75 can be realized as an object which succeeds the termi- 
nal data management section 1534. 
[0094] Next, the concept of the internal constitution of 
the said application function conversion section is de- 
scribed. As described in the above, the application func- 

20 tion conversion section 153 is provided with a data 
processing section for the respective terminals 1 531 , an 
application function interface section 1532 and a con- 
version communication section 1533. 
[0095] The data processing section for the respective 

^5 terminals 1 531 is provided with a sending/receiving sec- 
tion for the respective terminals 1 531a, a memory sec- 
tion for the users data 1 531 b and a connection data pro- 
curing section (session data management section) 
1531c, which acts as connection data procuring section. 

30 [0096] The data receiving/sending section for the re- 
spective terminals 1531a receives and sends the data 
depending upon the attribute of the data terminal, which 
is used by the users who use the embodiment of the 
present invention. In this connection, the attribute of the 

55 terminals means the program used by the terminal and 
the size of the display. Meantime, in the actual execu- 
tion, the data receiving/sending section for the respec- 
tive terminals 1531a can be realized as a succeeded 
object of the object which stores the attributes of the re- 

40 spective terminals, or as a separate object for each ter- 
minal by means of a method, which is started when a 
connection with one of the respective terminals is es- 
tablished. 

[0097] The user data memory section 1 531 b is to ob- 
45 tain the data such as discriminator wh ich exist in the per- 
sonal data management section 1523 of the security 
section 152 and to provide data of the user to the data 
processing section for the respective terminals, when 
the user of terminal accesses through the sen/er system 
50 of the present invention. 

[0098] The connection data procuring section 1531c 
is to control the connection data with the application 
service supply section 154 through the data terminal 
and the server system of the present invention. Espe- 
55 cially, as described later, the connection data procuring 
section 1531c provides the data for the restoration of 
the condition of the circuit connection in case that the 
circuit is broken down. 
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[0099] FIG. S is a drawing, which shows a concept ol 
the internal constitution of the application function inter- 
face section 1532. The application function interface 
section 1532 is provided with a data sending/receiving 
section 1 532a and a processing section depending up- s 
on the application function 1532b. 
[01 00] The data sending/receiving section 1 532a is to 
send and receive the data, when application function in- 
terface section 1532 performs connmunication with the 
conversion communication section 1 533 or the applica- io 
tion service supply section 154. Meanwhile, in the case 
of actual execution, the sending/receiving section for the 
application service supply section 154 and the sending/ 
receiving section for the conversion communication 
section 1533 can be provided independently. In case 
these are provided independently, the sending/receiv- 
ing section for the application service supply section 1 54 
can be also realized as a software module utilizing API, 
which is supplied by the application service supply sec- 
tion 154. 20 
[0101] The processing section depending upon the 
application function 1532b is provided for the purpose 
that data processing with the application service supply 
section 154 is performed actually by means of the data 
sending/receiving section 1532. Also, for example, data 2S 
conversion from the basic standard document form to 
the data format depending on the application function 
can be performed. 

[01 02] FIG. 7 is the drawing of the internal constitution 
of the conversion communication section 1533. The 30 
conversion communication section 1533 is provided 
with a data sending/receiving section 1533a, the data 
conversion section for the inputted data at terminal (ter- 
minal input data conversion section) 1533b, data from 
conversion section (data format conversion section) 3S 
1533c, the application function data interpreting section 
1 533d and a stohng section of the documents converted 
into the basic format 1 533 e. 

[0103] The data sending/receiving section 1533a is 
activated, when the conversion communication section 40 
1533 communicates with data processing for the re- 
spective terminals 1531 or the application function in- 
terface section 1532. Meanwhile, in the actual execu- 
tion, the data sending/receiving section 1533a can be 
realized as the successor of the object, which is provid- 45 
ed with the respective attributes of the terminals. 
[01 04] The data conversion section for the data input- 
ted at the terminal 1533b functions as follows. Namely, 
for example, in case of the WWW, which is a standard- 
ized user interface in INTERNET the user may transmit so 
the data on the display to the linked position by clicking 
the link point. However, this function may be realized by 
clicking the icons on the display or a system selecting 
the number from the menu display can be utilized. By 
using the server system of the present invention, the ss 
same service can be supplied to any user who utilizes 
any kind of terminal, as the difference of the attribute of 
the terminals is absorbed. The substance that absorbs 



the difference of the controllability on the side of the ter- 
minals, is the data conversion section for the data input- 
ted at the terminal 1533b. in other words, for example, 
the case that number is selected from the menu display 
and the case that the link point is clicked at WWW, will 
be described hereinafter as an equivalent. 
[0105] The data form conversion section 1533c is to 
convert the data which have been transmitted from the 
thermals and the application service supply section 154 
to the common structured language format, which is 
used in this apparatus. Meantime, in the case of actual 
execution, in order to increase the efficiency, the object, 
which converts the data from the terminal to the com- 
mon format and send the same to the sending/receiving 
section and the object which converts the data from the 
application service supply section 154 to the common 
format can be realized as a separate object, which suc- 
ceeds the conversion into the common format. 
[0106] The application function data interpreting sec- 
tion 1533d is to perform the interpretation, so that the 
data sent from the application function interface section 
1532 can be converted into the common structured lan- 
guage format. 

[01 07] The storing section of the documents convert- 
ed into the basic format (baste structured document 
memory section) 1533e is to store the data regarding 
the conversion rules and various data regarding the con- 
version, which are referred to when the data format con- 
version section 1 533e performs the conversion of the 
data into the common structured language format. 
[0108] Regarding the said constitution, its action/ 
function is described hereinafter. 
[01 09] FIG. 8 is the flow chart which shows an access 
processing from the data terminal on the side of the 
server computer. Especially, FIG. 8 is the flow chart, 
which shows the relation among the access section 151, 
the secuhty section 152 and the application function 
conversion section 153. 

[0110] First, when the access to the server computer 
is made by a data terminal, it is judged, whether the said 
access is made indoors and from a data terminal in the 
office, or outdoors and from a data terminal outside of 
the office (STEP S802). 

[0111] When the access is made from indoors/office 
(NO of STEP S802). namely the access is made from 
the data terminal 17 or 18, the data terminal 17 or 18 
receives service supply directly from the application 
service supply section 154 (STEP 8804). 
[0112] On the other hand, when the access is made 
from the data terminal outdoors/outside of the office 
(YES of STEP S802), the access section 151 receives 
the access at first (STEP S806). In this occasion, the 
attribute of the terminal can be obtained, by providing 
accessing interfaces for the respective terminals and 
communication infrastructures. Meantime, any wrong 
access can be caught up by obtaining/log the access 
data at the access section 151. 

[0113] Next, the access section 151 requests the se- 
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curity section 1 52 to confirm the propriety of the access 
(STEP S808). in this case, certification processing and 
the necessity of enciphering is judged for the communi- 
cation line. Meantime, this judgment of the content is 
made basing upon the data of the personal data man- s 
agement section 1523. 

[0114] When the access is approved by the security 
section 152 (YES of STEP SB10). the security section 
issues newly a discriminator. The issued discriminator 
is confirmed at the security section 151 (STEP SB12), w 
and this effect is conveyed to the application function 
conversion section 153 (STEP 8814). Upon receipt of 
the information, the application function conversion sec- 
tion 1 53 approves the application service supply section 
154 to have the data terminal to access to the desired 
application software (STEP S816). 
[0115] In the meantime, when the access is judged 
wrong from the result of the judgment at the security sec- 
tion 1 52 (NO of the STEP S81 0). the access section 151 
issues an error information to the user (STEP SSI 8). 20 
[0116] Meantime, it is of course acceptable to convey 
the said effect to the application function conversion 
section 153, even when the access is judged right. In 
this case, the newly issued discriminator is conveyed to 
the application function conversion section 153 at the 2s 
same time, In this way, among the three partners of the 
access section 151, the security section and the appli- 
cation function conversion section 153, a unified com- 
ment as to the users access is maintained. For example, 
even when the data terminals are different and an ac- 30 
cess is made to the server computer using the same 
pass words, the said communication partner can be dis- 
criminated without fail and a proper supply of the data 
can be achieved. 

[0117] The data terminal wh ich is approved to access 35 
to the application service supply section 154 as de- 
scribed in the above, can receive a supply of the desired 
application service by the application service supply 
section 1 54, according to the processing capacity of the 
said terminal and the kind of the communication infra- 40 
structure. This flow is shown in the flow chart of FIG. 9. 
[01 18] In case that the processing capacity of the data 
terminal is low (YES of STEP S902). for example, when 
a telephonic terminal 11 is in question, the capacity of 
the communication infrastructure is judged also low 45 
(STEP S904). the application function conversion sec- 
tion 1 53 supplies a service (STEP S908) after the appli- 
cation software is converted into a non-programmable 
data terminal, for example, binary data is converted into 
a text data(STEP S906). so 
[0119] On the other hand, in case the processing ca- 
pacity of the terminal is high (NO of STEP S902), for 
example, when temninal such as PDA 12 or portable PC 
13 is in question, capacity of the communication infra- 
structure is also judged as high (STEP 3910), the appli- ss 
cation function conversion section 153 supplies a serv- 
ice (STEP S908) after the application software is con- 
verted into a programmable data terminal, for example, 



image data is converted into a symbol data (STEP 
S912). 

[0120] In the meantime, as the said server computer 
is constituted so as to judge the kind of the accessing 
terminal and the kind of the infrastructure at the ac- 
cessed communication port, a userof the terminal 12,13 
of the terminal of high processing capacity can receive 
also the service of the converted data by using inten- 
tionally the communication port of low data processing 
capacity and of low infrastructure. 
[0121] As described in the above, the data terminal, 
which is enabled to access to the application service 
supply section 154. receives an desired application 
service, which are converted by the application service 
supply section 1 54 according to the processing capacity 
of the terminal and the kind of the communication infra- 
structure When receiving an application service, it is de- 
sirable that the data are enciphered to keep a secret. 
This processing is described using the flow chart of FIG. 
10. 

[0122] First, whether or not the data shall be enci- 
phered, is judged on the side of the server computer 14 
(STEP SI 002). This judgment can be made basing up- 
on the data from the communication port and security 
section 152, the application function conversion section 
1 53 and also may be judged depending upon the nego- 
tiation regarding the enciphering between the terminal 
and the server computer 

[01 23] In case that the data shall be enciphered (YES 
of STEP S 1002), a judgement of the enciphering sys- 
tem is made (STEP SI 004). This judgement is made by 
referring to a table regarding the data terminals to be 
accessed stored in the server converter 15. And, ac- 
cording to the result of the judgment at the server com- 
puter 15, a negotiation for confirmation is performed as 
to whether or not the decided enciphering system to be 
sent to the terminal is acceptable. 
[0124] In other words, when the server computer 15 
judges that the processing capacity of the data terminal 
and the capacity the communication infrastructure are 
low, and the said terminal confimns that the enciphering 
system suitable for the said terminal is acceptable, the 
security section 152 applies a simple enciphering sys- 
tem (STEP S 1 006). If the data terminal does not accept 
the enciphering system judged by the server computer, 
an error information is sent from the server computer ^5 
to the data terminal, and the enciphering is not per- 
formed (STEP Si 010). 

[0125] On the other hand when the server computer 
15 judges that the processing capacity of the data ter- 
minal and the capacity the communication infrastructure 
are high, and the said terminal confirms that the enci- 
phering system suitable for the said temninal is accept- 
able, the security section 152 applies a high grade en- 
ciphering system (STEPS 1008). If the data terminal 
does not accept the enciphering system judged by the 
server computer, an error information is sent from the 
server computer 15 to the data terminal, and the enci- 
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phering is not processed (STEP SI 010). 
[0126] Meantime, for the terminals, which cannot ac- 
cept the complex processing, it may be constituted, so 
that an effect that enciphering Is not performed, is con- 
veyed to the terminal in advance. s 
[01 27] Also, the enciphering can be made optional ac- 
cording to the intention of the user of the terminal and 
also whether or not enciphering is made, is set in ad- 
vance according to the kind of the application services. 
And it is also possible to advise to the terminal that the to 
application service is not enciphered. Also for the termi- 
nals which data processing capacity is judged low and 
the reliability of communication infrastructure is judged 
poor, the enciphering is not performed from the begin- 
ning and the said effect can be advised to the terminal. ^5 
[0128] Furthermore, of course, the enciphering can 
be performed so that a compression Is executed accord- 
ing to the attribute of the communication infrastructure. 
[0129] Next, the flow of the processing at the data 
processing section for the respective terminals 1531 is 20 
described. Here, the case that the data sending/receiv- 
ing section for the respective terminals 1531a lets the 
sending/receiving object start by means of software, is 
described. The data processing section for the respec- 
tive terminals 1531 executes the processing for send- 2S 
ing. receiving the data depending on the attribute of the 
terminals. 

[01 30] First, the data sending/receiving section for the 
respective terminals 1531a receives an access signal 
through the access section from a data terminals (STE P 30 
81 102). At this time, the data sending/receiving section 
for the respective terminals 1 531 a have sending/receiv- 
ing object for the respective terminals start based upon 
the data regarding the attribute from the terminals 
(STEP S1 104). In this case, the attribute data of theter- 35 
minal succeeds the data of the terminals data manage- 
ment section 153. In this connection, as to the attributes 
of the respective terminals, the following cases cam be 
considered, 

40 

* the attribute of the terminals is registered in ad- 
vance at the terminals data managing section. 

* At the time of the connection with the terminals^ the 
attribute is registered automatically at the server. 

At the time of the connection, the menu is displayed ^5 
tor the user, and the user is to select the attribute. 

[0131] After the sending/receiving object starts, the 
communication line is established (STEP S1 105). In 
case that the communication line is established normal- so 
ly (YES of STEP S1106), the verification processing is 
executed. At this verification processing, the verification 
is executed using a identifier, which is prepared by the 
security section 152 and used within the server compu- 
ter besides the ID and the password, which are used 55 
by a user. After the verification is executed, the connec- 
tion is fixed based upon the identifier. Meantime, verifi- 
cation data held at the users data memory section 



1531b and the verification processing obtain the data 
from the security section 152 (when the first verification 
processing is performed at the security section 1 52.) Af- 
ter the verification is processed, the connection data 
with the terminals is stored in the connection data pro- 
curement section 1531c (STEP S1 110), while the termi- 
nals receives the services of application function 
through the data processing section for the respective 
terminals 1531 . 

[0132] In this connection data means a logical con- 
nection relation. When the circuit is cut off normally, the 
connection data are released, however, the circuit is not 
cut off normally, the connection data are held, the 
processing can be recovered by said connection data 
at the next connection of the circuit. For the condition 
just before the breakdown of the circuit can be recov- 
ered by holding the data just before the breakdown of 
the circuit, when the connection between the server 
computer 1 5 and the terminals is broken down, Also, as 
described later, the sending/receiving object for the re- 
spective terminals receives the data in the basic stand- 
ardized format from the conversbn communication sec- 
tion 1533 and the sending/receiving object for the re- 
spective terminals converts the data from the basic 
standardized format into the data format adjusted for the 
attribute of the terminals. Furthermore, when the data 
shall be sent to the conversion communication section 
1533, the data is transferred together with the control 
data/parameter so that the data can be converted into 
the basic standardized document. 
[0133] Meantime, when the communication line is not 
established at the STEPS 1106 (NO of the STEP 
81 1 06), an error message is displayed and the commu- 
nication line is processed as an error and processing is 
finished. Also, when the verification processing is tailed 
at the above step S 1108 (NO of the STEP S1108), an 
error message is displayed and the communication line 
is processed as an error and processing is finished. 
[0134] Next, the processing flow at the conversion 
communication section 1533 is described by referring 
to the flow charts of FIG. 12 and 13, The conversion 
communication section 1533 performs a processing to 
convert the data based upon the attribute of the termi- 
nals and the services attribute supplied by the applica- 
tion function into the basic standardized document for- 
mat. The basic structured document is the format which 
controls the data within this system. Meanwhile, the ba- 
sic structured document can be realized using the gram- 
mar of HTML (Hyper Text Markup Language), which is 
used at present in the field of INTERNET almost as 
standard depending upon the content of the services 
provided by the application function. 
[01 35] The flow of the data from the data terminals to 
the application function conversion section 153 and ap- 
plication servicesuppty section 1 54 is described by re- 
ferring to FIG. 12. First, the data with an attribute of the 
terminals is received (STEP 81 202) and the data input- 
ted from the side of the terminals is procured from the 



= D93075aA2_L> 



12 



23 



EP 0 930 758 A2 



24 



data of the attribute of the terminals (STEP Si 204). The 
procured data is converled into the basic structured doc- 
ument forniat (STEP S 1 206). When the data is convert- 
ed into the basic structured document, the result is 
stored in the basic structured document storing section 
1 533e (STEP Si 208). And then, the same data are sent 
to the application function interface section 1 532 (STEP 
S1210). 

[0136] Next, the data flow from the application serv- 
icesupply section 154 and application function conver- 
sion section 153 to the terminals is described by refer- 
ring FIG. 1 3. First the data from the application service- 
supply section 154 are received (STEP Si 302) and the 
data provided by the application servicesupply section 
1 54 from the attribute data/parameters of the application 
function are procured (STEP SI 304). The procured data 
is converted into the basic structured document format 
(STEP S 1 206). When the data is converted into the ba- 
sic structured document, the result is stored in the basic 
structured document storing section 1533e (STEP 
S1308). And then, the same data are sent to the data 
processing section for the respective terminals 1531 
(STEP S1310). 

[0137] Also, when the breakdown of the circuit is de- 
tected by the sending/receiving section, as the connec- 
tion (session?) is held, at the next connection, the con- 
nection (session ?) and the content of the basic struc- 
tured document storing section can be coincided. 
[0138] As described in the above, a work equivalent 
to the work in the office can be performed successively 
even in the mobile computing environment according to 
the embodiment of the present invention. In other words, 
a supply of the application services depending upon the 
processing capacity of the data terminals is enabled, 
and it is possible to supply the application services ac- 
cording to the communication capacity of the communi- 
cation infrastructure , even in the case, where a plurality 
of communication infrastructures mixed exist. 
[0139] Furthermore, even in the case that the com- 
munication is interrupted halfway, at the next connec- 
tion, the data sending/receiving can be restarted from 
the point of the breakdown. And, by utilizing this func- 
tion, at the data processing work, which requires a long 
time, after the data terminals instructs said data 
processing work by connecting to the server computer, 
the connection is once cut off, and after a certain time 
the connection is rebuilt, the data terminals is possible 
to obtain the processed result immediately. Further- 
more, the case that the data terminal stays occupied and 
cannot perform any other task for a long time as in the 
past, can be prevented and the data temninals can be 
used effectively. Furthermore, the Increase of commu- 
nication charge due to the fact that the connection be- 
tween the data terminals and the server computer 15 
has to be kept for a long time, can be avoided according 
to the embodiment of the present invention, which is ex- 
cellent economically. 

[0140] And, also the security function can be im- 



proved according to the embodiment of the present in- 
vention. 

[0141] Meantime, the aforementioned method as pro- 
grammed data which can be executed by a computer, 

5 of course, can be applied to various kinds of apparatus- 
es, andean be conveyed through communication media 
to various kinds of apparatuses for application, by writ- 
ing in semiconductors memones, for example, floppy 
disks to be equipped in FDD 19. optical memory disk 

TO devices such as FDD 20, CD-ROM 21 and DVD. The 
computers (server computers), which can realize these 
apparatuses, are to execute the aforementioned 
processing by reading out the programmed data stored 
in the memory media and by being operated by said pro- 

^5 grammed data. 

(Second embodiment) 

[0142] Hereinafter, the second embodiment of the 

20 present invention is described. Identical or correspond- 
ing parts or functions as in the first embodiment are des- 
ignated by like reference numerals and the explanations 
therefor are eliminated. In this embodiment, the circuit 
recovery function and asynchronous processing func- 

25 tion when the circuit is broken down, are described. 
Meantime, in this embodiment, the explanation is made 
based upon the technologies related with INTERNET, 
which attracts attention extremely in network computing 
environment today, however, the intent of this embodi- 

30 ment is not limited to the application to the INTERNET 
environment. The reason, why the explanation is made 
by referring to the technologies related to I NTERNET, is 
that the same technologies have established typical pro- 
tocol such as HTTP and that it is not necessary to ex- 

35 plain the processing depending upon interface of the in- 
dividual application functions. 

[0143] In the network computing environment, which 
is the object of the present invention, it is necessary to 
support various communication infrastructures. In the 

40 various communication infrastructures, which are re- 
ferred here, are a communication infrastructure, which 
is unstable in quality, a communication infrastructure, 
which transmission performance is inferior, and also a 
communication infrastructure, which circuit charges 

45 (communication costs) are expensive, are involved. 
Therefore, while paying attention to the communication 
protocol which is used for the application function con- 
version section 153 and application servicesupply sec- 
tion 154, a embodiment, v^ich can solve the present 

50 problems without exerting any influence to the applica- 
tion services function used normally is explained. 
[0144] FIG. 14 is a drawing which shows a concept of 
the constitution of a network computing system includ- 
ing a countermeasure function for circuit break-down by 

55 incidental accident or like and asynchronous processing 
function. It is explained that in this embodiment a local 
agent 131 in charge of local agent function existing in 
the data terminals 1 3 used by the user, and a remote 
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agent 1 55 in charge of remote agent existing in the serv- 
er computer solve the problems by intermediating the 
communication between WWW-browser; and WWW- 
server. In this connection, the local agent is installed in 
the data terminals 1 3 and is to realize a intermediating 
between the client software, which is also installed in 
the data terminals 1 3 and the server system. On the oth- 
er hand, the remote agent is installed in the server com- 
puter and is to realize an intermediating between the 
server software, which is also installed in the data ter- 
minals 1 3 and the client system. Meantime, said server 
system means a software or a remote agent, and the 
client system means a client software or local agent. 
Meantime, in case the user does not use the function 
according to the embodiment of the invention though 
said function is installed, the apparatus in which said 
function is installed, functions just as a data transmis- 
sion apparatus or a data cache, and therefore, the end- 
user environment is not influenced at all by mounting 
said function. Also as described later, by realizing the 
constitution, wherein the agent is equipped with a data 
cache function, and WWW-browser; or like is not 
equipped with a data cache function, the security if the 
data in the data cache can be insured. Meantime, said 
remote agent 155 is connected to the application func- 
tion conversion section 1 53 and the application service- 
supply section 1 54, so that the remote agent 1 55 is con- 
stituted so as to be able to communicate with the server 
computer without using the access section 151 . 
[0145] The flow of the normal processing of the re- 
quest issued by the client software 1 32, in case the func- 
tion according to the embodiment of the present inven- 
tion is used, is described by referring to FIG. 15. 
[0146] First, whether or not said function shall be 
used, is judged by inquiring at the security section 152. 
Here, when said function is not used (NO of "STEP S 
1502). the local agent 131 is not connected to the re- 
mote agent 155, but is connected to the WWW-sen/er 
directly (STEP SI 504). Meantime, in this case, it is pos- 
sible to cache the data according to necessity. Also, 
when the communication through a specified proxi is 
specified, it is, of course, possible to make a communi- 
cation through a proxi server. 

[0147] Next, when said function shall be used (YES 
of STEP SI 502), the request from WWW-browser; is 
held at first at the local agent 131 (STEP SI 506). Fur- 
ther, the local agent 131 transmits this request to the 
remote agent 155 (STEP S 1508). The remote agent 
155 allocate a identifier to the request (STEP SI 510), 
and this identifier is advised to thew local agent 131 
(STEP SI 51 2). The local agent 131 holds the request 
together with the identifier, after the local agent 131 is 
advised on the identifier. And then the local agent 131 
enters into the condition that waits for a response to the 
request from WWW-server (STEP SI 51 4). The remote 
agent 1 55 transmits the request from the local agent 1 31 
to www-server Z(STEP S 1516) and enters into the 
condition that waits for a response to the request (STEP 



S1518). 

[0148] The flow of the normal processing , when the 
response is made from the server software, is described 
by referring to FIG. 16. 

s [0149] When the remote agent obtains a response to 
the request from WWW-server, the remote agent holds 
the content of the response (STEP S1602). And then 
the result is conveyed to the local agent 131 (STEP S 
1604). The local agent 131 transmits the result to 

10 WWW-browser; (STEP SI 606). When the remote agent 
155 transmitted all the communication data completely 
to the local agent 1 31 , the remote agent 155 enters into 
a transmission finish condition (STEP SI 608). When the 
local agent 131 completes the reception of the all the 

75 data from the remote agent 155, the local agent 1 31 ad- 
vise the remote agent on the finish of reception (STEP 
SI 610). Upon receipt of the message of reception finish 
from the local agent 1 31 . the remote agent 155 dele'tes 
the request, the identifier and the processing result from 

20 www-server, which have been held (STEP SI 61 2). 
And then, the remote agent advises the local agent 1 31 
on the transaction finish. Upon receipt of the message 
of transaction finish, the local agent 1 31 deletes the re- 
quest itself, the identifier for said request (STEPS 1 616). 
In this way, the processing of the request from WWW- 
browser; is finished. 

[0150] Now, theflowof the countermeasure for the cir- 
cuit break-down by means of a series of processing is 
described. 

30 [0151] When the transmission process becomes im- 
possible due to a break-down of the communication cir- 
cuit and the like during the transmission of the request 
from the local agent 131 to the remote agent 155, or 
during the transmission of the request identifier from the 

35 remote agent 155 to the local agent 131, a time-out 
processing is caused at the local agent 131 and the re- 
quest for a repeat sending of the message is processed. 
[0152] Also similarly, when the transmission process 
becomes impossible due to a break-down of the com- 

40 munication circuit and the like during the transmission 
of the message of reception finish from the local agent 
131 to the remote agent 155, a time-out processing is 
caused at the local agent 1 31 and the conditions are 
recovered. 

45 [0153] When the transmission of the processing result 
becomes impossible due to a break-down of the com- 
munication circuit and the like during the transmission 
of the processing result from the remote agent 155 to 
the local agent 131 , a time-out processing is caused at 

so the local agent 1 31 and the request for a repeat sending 
of the message is processed. However, as the time-put 
processing of this time is caused during the transmis- 
sion of the processing result from the remote agent 1 31 . 
the same effect and the leading position for the repeated 

S5 transmission are conveyed to the remote agent 155. 
The remote agent 155 restarts the transmission of the 
processing result from the required position based upon 
these data. Also when the transmission of the process- 



BN'SDOCID <=P 0330753A2_!_> 



14 



27 



EP 0 930 758 A2 



28 



ing result becomes impossible due to a break-down of 
the communication circuit and the like during the trans- 
mission of the message of transaction finish from the 
remote agent 155 to the local agent 131. a time-out 
processing is caused at the local agent 1 31 and the re- 
quest for a repeat sending of the message is processed. 
However, when the deletion has been already complet- 
ed at the remote agent 1 55, the remote agent 1 55 sends 
a message that the deletion of the processed result has 
been finished. Meantime, the actual circuit access is 
performed by the access section 151. 
[0154] Also it is also possible for the local agent 131 
to provide WWW-browser; with an asynchronous ac- 
cess processing using the function according to the em- 
bodiment of the invention. In other words, a flow such 
as shown in FIG 17 can be realized. 
[0155] When an access to the WWW-server arises 
(STEP SI 702), the local agent 131 transmits the infor- 
mation that the request is received, to WVWV-browser; 
(STEP SI 704). And then, the local agent 131 transmits 
the request from the WWW-browser; to the remote 
agent or WWW-server 'STEPS 1706). And then, while 
the result of the processing is held at the remote agent 
155 (STEP S1708), the processed result is transmitted 
to the WWW-browser;, when the access is repeated by 
the WWW-browser; (STEP S 1710). By providing such 
an arrangement, a processing, which requires a long 
time, can be executed asynchronously together with 
WWW-browser;. Meanwhile, when the result of 
processing is accessed by WWW-server before the 
processing is finished at the server computer, the local 
agent 131 informs WWW-browser; that the processing 
is under way. 

[01 56] Meanwhile, it has been already explained that 
an asynchronous processing can be realized using the 
arrangement for the session (connection ) control of the 
present invention at the time of break-down as ex- 
plained in the above. If the arrangement of session (con- 
nection) control is used, when the communication circuit 
with the data processing terminals is broken down, and 
when the user utilizes the application function repeated- 
ly, he can utilize a different kind of data processing ter- 
minals. 

[0157] The flow of this processing is described by re- 
ferring to FIG .16. In other words, when the user tries 
the access again (STEP SI 802), a verification process- 
ing is performed at the security section 152 (STEP S 
1304) and the session (connection) of the user can be 
recovered based upon said result (YES of the STEP S 
1 306). Thereafter, the basic structured document format 
held based upon the session (connection) data is con- 
verted into the format suitable for the terminals utilized 
at present (STEP S1B03) and the communication is ex- 
ecuted with the data processing terminals (STEP 
SI 310). In this way, the user can change the terminals 
halfway during the processing. Meanwhile, in the case 
of the actual installation, whether or not session (con- 
nection) shall be recovered, can be left to option of the 



user at the circuit connection. 

[01 58] On the other hand, in the case that the session 
is not recovered (NO of STEP SI 806). a session infor- 
mation is newly established (STE P S 1 81 2) and the com- 

5 munication is started (STEP S 181 24). 

[01 59] Meanwhile, the method described in the above 
can be applied to various apparatuses, by writing in 
semiconductor memory such as floppy discs mounted 
in FDD 18, optical disc devices such as HDD 20, CD- 

^0 ROM device 21 and DVD etc., or by transmitting the 
method through communication media to apply the 
same to various apparatus. The computer (server com- 
puter), which can realize this apparatus, is to read out 
the programmed data stored in memories media and ex- 

'5 ecutes the above processing by being controlled by the 
programmed data. 

[01 60] Also it is, of course, possible to perform the var- 
ious processing which are described at the first embod- 
iment, even in this embodiment. 

20 

(Third embodiment) 

[0161] Hereinafter the third embodiment of the 
present invention is described. Identical or correspond- 

^5 ing parts or functions as shown in the first embodiment 
are designated by like reference numerals and the ex- 
planations therefor are eliminated. FIG. 19 is a drawing 
which shows concept of the constitution of the network 
computing system including the idea of enciphering sys- 

30 tern for data cache. 

[0162] For example, if the data cache of WWW- 
browser; is wrongly accessed, when a user is utilizing 
WWW-browser;, the data may leak out. Therefore the 
enciphering of the data cache becomes necessary. 

35 [01 63] As already explained, the security section 1 52 
is equipped with a function that executes verification of 
users, a management function for the enciphering 
processing and keys in regard to enciphering (key man- 
agement server function) etc. Also, the local agent 131 

40 includes a data cache, for example, when the user ex- 
ecute a work by utilizing WWW-browser;, an efficient 
processing can be executed even if he does not utilizes 
the function for data cache. In this connection, by storing 
data in the data cache within this local agent 131, the 

45 security of data cache can be insured. Furthermore, in 
FIG. 19, it is shown that the data terminals 13 is 
equipped with a client function for key management ( 
Key management client 133. This is to execute a 
processing on the side of key clients for enciphering and 

50 deciphering. And, enciphering section 1 34 is a section 
which execute enciphering and deciphering actually. 
Meantime in the actual installation, these functions may 
be installed in the local agent 1 31 . 
[01 64] Here, the flow of data cache of the local agent 

5S 1 31 and the remote agent 1 55 is described by referring 
to FIG. 20. Here, the case that the user utilizes WWW- 
browser; is explained and the flow of the cooperation 
between the agents, and the enciphering processing is 
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explained later by referring to FIG. 21 . 
[0165] As explained already, when the function of the 
present Invention shall be used when a user is going to 
access to the WWW-server in the server from WWW- 
browser; in the terminals, the data passes through the s 
local agent 1 31 and the remote agent 155. And the data 
cache in WWW browser; is not utilized. 
[0166] At first, when a request arises from WWW- 
browser;, which a user utilizes (STEP S 2002), it is 
judged, whether or not the data to be accessed exist in 
the data cache of the local agent 131 (STEP S2004). If 
the data does no exist (NO of STEP S2004), the request 
from WWW-browsen 'S transferred to the remote agent 
155, and the result is obtained from the server (STEP 
S2006). In case that the data exist in the data cache is 
(YES of STEP S2004), the content of the data in the 
data cache is made to a up-to-data condition and given 
to WWW-browser;(STEP S2008). Meantime, at this 
time, whether the data in the data cache is in a up-to- 
date condition, is judged by linkage with the server. If 20 
the data in the data cache is confirmed as up-to-date, 
the data in the data cache, as they are, are naturally 
transferred to WWW-browser;. 

[0167] If the remote agent 155 procures the relevant 
data from WWW-server, it is judged, whether said data 25 
is the data that security shall be insured (STEP S 2020). 
At this moment, the judgement as to whether security 
shall be insured for said data, can be made based upon 
the reasons for the judgement, which are stored as head 
data. Meantime, of course, the judgement can be made 30 
based upon said data while the content of the data are 
interpreted directly. 

[0168] Further, when the security is required (YES of 
STEP S2010), a signal of said effect is added to the data 
(STEP S 201 4) and said data are transmitted to the local 35 
agent 1 31 (STEP S201 4). The local agent 1 31 transmits 
the data to WWW-browser; (STEP S 201 8), after storing 
the enciphered data in the cache (STEP S 2016). 
[01 69] Next, the flow of the enciphering and decipher- 
ing process is described by referring to FIG. 21. the 40 
processing of the enciphering and deciphering at the cli- 
ent terminals is caused when the storing and call-up for 
the data cache arises. I n this case , at first, the encipher- 
ing section 1 34 requests a delivery of the key for the 
enciphering (STEPS 2102, S2104. Here , when the key 45 
management client 133 has the key (YES of STEPS 
2116), the enciphering or deciphering is executed based 
upon this key (STEPS 2116). 

[0170] On the other hand, in case that the key man- 
agement client 133 does not have the key (NO of so 
STEPS 2116), the key management client 1 33 requests 
the key management server for a delivery of the key 
(STEPS 210S). 

[0171] The key management server, which has re- 
ceived the request, inquires the verification function of 55 
the security section 152 (STEP 821 10) and judges, 
whether or not the key shall be delivered (STEP S 2112). 
If the request is judged right (YES of STEP S 2112), the 



key management server delivers the key to the key man- 
agement client 133 (STEP S2114) and enciphering and 
deciphering can be executed based upon said key 
(STEPS 21 1 6). Meantime, enciphering and deciphering 
are executed, when storing and call-up of data into the 
cache in the terminals, however, in the actual execution, 
enciphering and deciphering may start from the stage 
of sending/receiving of the data between the client agent 
and the server agent. Also, though the case that the key 
server and security section exist in the server, has been 
described, all these functions may be, of course, in- 
stalled in the terminals for enabling the client to execute 
the process independently 

[0172] In the meantime, a enciphering arrangement 
for local data, which can access to the data in the ter- 
minals itself only when it is connected to the network, 
can be realized, at the data terminals, which can store 
data in the terminals itself such as PC, by utilizing said 
security arrangement. 

[0173] Successively, the processing of the decipher- 
ing arrangement for the local data is described by refer- 
ring to FIG. 22. 

[0174] At first, when the user is going to connect to 
the server from the data terminals and when the verifi- 
cation processing has been completed by the security 
section 152, the key management server delivers the 
key to be used for enciphering/decipheringtothekey- 
managementclient 1 33. And then, in case that the user 
is going to access to the data file (STEPS 2202), the 
enciphering section 134 reads out said instruction and 
makes an inquiry at the key management client 133 
(STEP S2204). Upon this inquiry, the key management 
client 133 informs enciphering section 134 of said key 
and the deciphering is made based upon said key 
(STEP S221 4). In this connection, that the key manage- 
ment client has the key, mean that the user of the ter- 
minals has already made a login in the server. 
[01 75] On the other hand, when the key management 
client 1 33 does not have the key (NO of STEP S2206), 
the user is suggested to nnake login at the server ( STEP 
S2208). Here, when the login is not perfomned, or, when 
the login is not finished rightly (No of STEPS 2210), the 
access processing to the data is handled as an error 
(STEP S2216). If the login process has been executed 
normally (YES of STEP S2210), the key management 
client receives the key from the key management server 
and the deciphering process is executed using said key 
(STEPS 2214). Meanwhile, as to the enciphering proc- 
ess, the enciphering process is executed, when the in- 
struction for the write-in is issued, contrary to the above. 
It is also naturally possible to provide the automatic 
processing for writing in and to execute enciphering and 
deciphering clearly. 

[01 76] In the meantime, even after the login condition 
for the server computer is released, it is possible to 
maintain said condition for a certain time as to the key 
management. By realizing such a processing, it be- 
comes possible to access to the local data for a certain 
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time even at an incidental circuit break-down. 
[01 77] Meanwhile, the method described in the above 
can be applied to various apparatuses, by writing in 
semiconductor memory such as floppy discs mounted 
in FDD 16. optical disc devices such as HDD 20, CD- 
ROM device 21 and DVD etc., or by transmitting the 
method through communication media to apply the 
same to various apparatuses. The computer (server 
computer), which can realize this apparatus, is to read 
out the programmed data stored in memories media and 
executes the above processing by being controlled (un- 
der control) by the programmed data. 
[01 78] Also it is. of course, possible to perform the var- 
ious processing which are described at the first and sec- 
ond embodiments, even in this embodiment. 

(Fourth embodiment) 

[0179] HereinaUer the fourth embodiment of the 
present tnvenlton is described. Identical or correspond- 
ing parts or functions as shown in the first embodiment 
are designated by like reference numerals and the ex- 
planation therefor is eliminated. 

[01 80] The security section 1 52, which is described in 
the above is described. 

[0181] In the data exchange system, which is de- 
scribed in the present invention, a discrimination func- 
tion, which discriminates and manage the users, is im- 
portant. Especially, in the distributed network computing 
system, wherein the various portable terminals are 
used, as in the case of this system, key input systems 
of the respective portable data terminals are not same. 
In other words, there are different keys, keys which input 
is easy and keys which input is difficult, for example, in 
case that a portable PC is used as a portable data ter- 
minals, the input of English letters and numerals is easy. 
However, in the case that apparatus such as a portable 
phone such as so-called smart -phone is used as the ter- 
minals, keyboard can not be used generally as in the 
case of aforementioned PC, and the buttons for Input- 
ting the number only can be used as the input keys. Ac- 
cordingly, in the case of the login name used for the dis- 
crimination of the user (account name) and when the 
letters other than the numerals are used tor the pass 
word, the input is easy at a portable PC, however, in 
case of a portable phone such as smart phone, input is 
complicate. Also, in a distributed network computing 
system such as this system, it cannot be denied that the 
same login name is used by a plurality of the users. Ac- 
cordingly, in case of the verification, such a situation 
should be coped with. 

[01 82] As already described in the above, the security 
section 152 is provided with a verification processing 
section 1521, a code processing section 1522 and a per- 
sonal data management section 1 523. 
[0183] In what structure of data the personal data are 
managed corresponding to the login names of the users. 
In the personal data management section 1523, the 



competence of the login against the main server system, 
attribute items and the attribute value are stored. In this 
connection, the attribute value are the data regarding 
the services items, which respective application func- 

5 tions are to supply, such as login name, competence, 
pass word for the purpose of application function, when 
the application functions, namely, various application 
software of the application servicesupply section 154 
are utilized. Meantime, for the security purpose, these 

10 personal data are enciphered in the actual execution 
and are operated by a tool of exclusive use. The table 
1 in FIG. 23 shows the idea of management items in the 
form of table. 

[0184] At the discrimination processing section 1521 , 
not only the actual verification processing is performed 
but also the relations between the identifiers, which are 
issued in connection with respective logins and which 
have been already mentioned, and the login names are 
managed. This correspondence is renewed every time, 

20 when login and logout of each user is processed. The 
table 2 of FIG. 24 shows an idea of the relation between 
the login names and the identifiers. In this connection, 
even when a login is processed with the same logon 
name to the server system o1 the present invention, dif- 

25 ferent identifiers are issued. Meanwhile, Table 2 show 
just an idea of the correspondence, and it is not neces- 
sary to use a form of determinant as shown in the table 
at the actual management. 

[0185] The user of this server system may receive a 

30 supply of the services from the application servicesup- 
ply section 154 through this system. For this purpose, 
at first the user must be discriminated as a justified user 
by means of the discrimination function. When the dis- 
crimination processing is finished and the login is com* 

35 pieted, the respective application functions may be ac- 
cessed according to the necessity. 
[01 86] Next, the flow of the processing when the serv- 
er system of the present invention received a request 
for a verification, is described hereinafter. 

^0 [0187] It is judged, whether or not the data of the user, 
which are presented by the user of the terminals coin- 
cides with the data, which the server system of the 
present invention manages as the justified user. Here 
when the verification is processed, then a identifier is 

45 issued, as already explained. This identifier and the 
login name are advised also to the application function 
conversion section 153. In this connection. If the user 
requests a login through the server system to the appli- 
cation functions (application software of the application 

50 servicesupply section 154), an inquiry on the personal 
data together with the data of the user, who issued the 
request, such as the login name, pass word, verification 
identifier is executed by the application function conver- 
sion section 153 to the security section 152. 

55 [0188] The personal data which are managed at the 
security section 152, involve also the login name and 
the pass word of the user, which are used at the appli- 
cation function. When the login name and verification 
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data such as a identifier are judged right, the security 
section 1 52 supplies the application function conversion 
section 153 with the personal data corresponding to the 
application functions. 

[0189] As the application function conversion section s 
1 53 supplies the application functions with the personal 
data, when the user once executes login at the server 
systenn of the invention, a renewed login is no more nec- 
essary, when he utilizes the application functions. 
[0190] The flow of the processing, when the server io 
systenn of the invention receives a request for a verifi- 
cation, is described in detail by referring to FIG. 25, 
which shows a flow chart of verification processing, and 
FIG. 26 which shows the flow chart of vicarious process- 
ing of login. is 
[0191] When a request for verification (user's data in- 
cluding login nanne, pass word and ternninals data) is 
received (FIG. 25. STEP S 2502), personal data, which 
are managed at the security section 152 are searched 
(STEP S 2504) and it is judged whether or not said per- 
sonal data are already registered (STEP S2506). If said 
personal data are already registered (YES of STEP 
82506). the personal data is obtained (STEP S 2508) 
and is compared with the data received from the termi- 
nals (STEP S 25 1 0). If both data coincide each other by ^5 
the comparison (YES of STEPS 2510), a identifier is is- 
sued (STEP S 251 2). In case that these do not coincide 
each other, it is processed as an error (STEP S2514). 
r^eantime, at the step S2506,when the personal data 
are not registered (NO of STEPS2506), the processing 30 
finishes. Meantime, the enciphered data are made com- 
plex according to the necessity. 

[0192] When the verification processing is performed 
in such a way and a identifier is issued, the user is en- 
abled to make a request for the use of the application 3S 
functions ( the application software at the application 
servicesupply section 154). In this connection, when the 
user makes a request tor the use of the application func- 
tions, it is necessary for him to make a login at the ap- 
plication functions. When the user makes a request for 40 
the login at the application functions (FIG. 26, STEP S 
2602), the personal data corresponding to the applica- 
tion functions is inquired by the application functions 
conversion section 153 at the security section (STEP S 
2604) and the verification is judged by the security sec- ^5 
tion 152 (STEP S 2606. S 2608). 
[0193] When the verification coincides with (YES of 
STEP S2608), the personal Data are transferred tp the 
application function conversion section 153 (STEP S 
2610). Based upon this information, the application 50 
function conversion section 153 performs a vicarious 
processing of login at the application functions (STEP 
S 2612). 

[01 94] On the other hand the verification does not co- 
incide with (NO of STEP S 2603), the same is processed 55 
as an error and the process finishes. 
[0195] As described in the above, as the application 
function conversion section 1 53 provides the application 



function with the personal data, if the user makes a login 
once, it is no more necessary to newly to make a log in 
when he utilizes the application function, according to 
the embodiment of the present invention. 
[0196] Also, even with the constitution of this embod- 
iment, various processing as described at the aforemen- 
tioned first, second and third embodiments can be. of 
course, operated and performed. 
[01 97] Meantime, the aforementioned method as pro- 
grammed data which can be executed by a computer, 
of course, can be applied to various kinds of apparatus- 
es, andean be conveyed through communication media 
to to various kinds of apparatuses for application, by 
writing in semiconductors memories, for example, flop- 
py disks to be equipped in FDD 1 9, optical memory disk 
devices such as FDD, CD-ROM and DVD. The comput- 
ers (server computers), which can realize these appa- 
ratuses, are to execute the aforementioned processing 
by reading out the programmed data stored in the mem- 
ory media and by being operated by said programmed 
data. 

[0198] As described in the above, according to the 
present invention, even in the mobile computing envi- 
ronment, the work equivalent to the work in the office 
can be performed successively, In other words, the serv- 
ices which are suitable to the processing capacity of the 
various kinds of terminals, can be supplied, and further- 
more, even in case that a plurality of communication in- 
frastructure coexisted, the servicesuitable for the infra- 
structure can be supplied. Furthermore, an excellent ef- 
fect, that the security function can be improved, is ex- 
pected. 

[0199] Furthermore , according to the present inven- 
tion, the communication break-down that the communi- 
cation is broken down halfway, can be properly coped 
with. In addition, even in case of the data processing 
work, which requires a long time, the terminals can be 
effectively utilized and also a excellent practical benefit 
that the communication charge can be saved econom- 
ically, can be brought. 

[0200] Also according to the present invention, the 
login function can be improved (vicarious login function: 
single sign on function) and also the operability can be 
improved extensively. 



Claims 

1. A distributed network computing system compris- 
ing; an data processing apparatus, which supplies 
an application servicesuch as various application 
software, 

vanous kinds of terminals, which receive the 
. application services from said data processing 
apparatus, 

a communication network, which connects said 
data processing apparatus with said terminals. 
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and a data exchange apparatus, 
said data exchange apparatus further compris- 
ing; an access control means which controls 
the connection of said terminals with said data 
processing apparatus, 5 
a security control means which judges verifica- 
tion of said terminals with regard to said access 
means, and 

a function converting means, which converts 
the services contents of the application servic- io 
es to be supplied to said terminals based upon 
data from said security control means into a for- 
mat suitable for said terminals. 

A distributed network computing system compris- ?5 
ing; an data processing apparatus, which supplies 
an application servtcesuch as various application 
software, 

various kinds of terminals, which receive the 20 
application services from said data processing 
apparatus, 

a communication network, which connects said 
data processing apparatus with said terminals, 
and a data exchange apparatus, 25 
said data exchange apparatus further compris- 
ing; an access control means which controls 
the connection of said terminals with said data 
processing apparatus. 

a security control means which judges verifica- 30 
tion of said terminals with regard to said access 
means, a function converting means, which 
converts the services contents of the applica- 
tion services to be supplied to said terminals 
based upon data from said security control 35 
means into a format suitable for said terminals; 
and 

a connection control means, which controls the 
connecting condition of said terminals with said 
data processing apparatus and controls to sup- 40 
ply the services contents of the data converted 
by said function converting means based upon 
said connecting condition. 

A distributed network computing system compris- 45 
ing; an data processing apparatus, which- supplies 
an application servicesuch as various application 
software, 

various kinds of terminals, which receive the 5o 
application services from said data processing 
apparatus, and 

a communication network, which connects said 
data processing apparatus with said terminals^ 
and a data exchange apparatus. 55 
said data exchange apparatus further compris- 
ing; an access control means which controls 
the connection from said terminals; 



a security control means which judges verifica- 
tion of said terminals with regard to said access 
means, a function converting means, which 
converts said services contents of the applica- 
tion services to be supplied to said terminals 
based upon data from said security control 
means into a format suitable for said terminals, 
a connection control means, which controls the 
connecting condition of said terminals with said 
data processing apparatus and controls to sup- 
ply the services contents of the data converted 
by said function converting means based upon 
said connecting condition, and 
a control means for controlling said terminals 
so that said terminals is enabled to decipher 
specific data, when said terminals is in connec- 
tion with said data exchange apparatus through 
a network and made a request for an access to 
the specific data by meeting the specified con- 
ditions. 

4. A distributed network computing system compris- 
ing; an data processing apparatus, which supplies 
an application servicesuch as various application 
software, 

various kinds of terminals, which receive the 
application services from said data processing 
apparatus. 

a communication network, which connects said 
data processing apparatus with said terminals, 
and a data exchange apparatus, 
said data exchange apparatus further compris- 
ing, an access control means which controls 
. the connection of said terminals with said data 
processing apparatus, 

a security control means which judges verifica- 
tion of said terminals with regard to said access 
means, a function converting means, which 
converts said services contents of the applica- 
tion services to be supplied to said terminals 
based upon data from said security control 
means into a format suitable for said terminals, 
a connection control means, which controls the 
connecting condition of said terminals with said 
data processing apparatus and controls to sup- 
ply the serviices contents of the data converted 
by said function converting means based upon 
said connecting condition, 
a first control means for controlling said termi- 
nals so that said terminals are enabled to deci- 
pher specific data, and 

a second control means that executes a verifi- 
cation process by means of a proper system 
-and controls a login process suitable for the ter- 
minals, when said tenminals are in connection 
with said data exchange apparatus through a 
network and made a request for an access to 
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the specific data by meeting the specified con- 
ditions. 

A distributed network computing system compris- 
ing; an data processing apparatus, which supplies 5 
an application servicesuch as various application 
software, 

various kinds of terminals, which receive the 
application services from said data processing io 
apparatus, 

a communication network, which connects said 
data processing apparatus with said terminals, 
a network connecting means for connecting 
networks with each other, and the data ex- ts 
change apparatus provided for said network 
connecitng means, and a data exchange appa- 
ratus, 

said data exchange apparatus further compris- 
ing; an access control means which controls 20 
the connection from said terminals; 
a security control means which judges verifica- 
tion of said terminals with regard to said access 
means, a function converting means, which 
converts services contents of said application 25 
services to be supplied to said terminals based 
upon data from said security control means into 
a format suitable for said terminals. 

A distributed network computing system compris- 30 
ing; an data processing apparatus, which supplies 
an application servicesuch as various application 
software. 

various kinds of terminals, which receive the 35 
application services from said data processing 
apparatus, 

a communication network, which connects said 
data processing apparatus with said terminals; 
a network connecting means for connecting 40 
networks with each other, and 
a data exchange apparatus, 
said data exchange apparatus further compris- 
ing; an access control means which controls 
the connection from said terminals, 45 
a security control means which judges verifica- 
tion of said terminals with regard to said access 
means; 

a function converting means, which converts 
the services contents of said application serv- so 
ices to be supplied to said terminals based up- 
on data from said security control means into a 
format suitable for said terminals; and 
a connection control means, which controls the 
connecting condition of said terminals with said 55 
data processing apparatus and controls to sup- 
ply the services contents of the data converted 
by said function converting means based upon 



said connecting condition. 

7. A distributed network computing system compris- 
ing; an data processing apparatus, which supplies 
an application servicesuch as various application 
software, 

various kinds of terminals, which receive the 
application services from said data processing 
apparatus, 

a communication network, which connects said 
data processing apparatus with said terminals, 
a network connecting means for connecting 
networks with each other, and a data exchange 
apparatus said data exchange apparatus fur- 
ther comprising; an access control means 
which controls the connection from said termi- 
nals; 

a security control means which judges verifica- 
tion of said terminals with regard to said access 
means, 

a function converting means, which converts 
the services contents of said application serv- 
ices to be supplied to said terminals based up- 
on data from said security control means into a 
format suitable for said terminals, 
a connection control means, which controls the 
connecting condition of said terminals with said 
data processing apparatus and controls to sup- 
ply the services contents of the data converted 
by said function converting means based upon 
said connecting condition, and 
a control means for controlling said terminals 
so that said terminals are enabled to decipher 
specific data, when said terminals are in con- 
nection with said data exchange apparatus 
through a network and made a request for an 
access to the specific data by meeting specified 
conditions. 

8. A distributed network computing system compris- 
ing; an data processing apparatus, which supplies 
an application servicesuch as various application 
software; 

various kinds of terminals, which receive appli- 
cation services from said data processing ap- 
paratus, 

a communication network, which connects said 
data processing apparatus with said terminals, 
a network connecting means for connecting 
networks with each other, and a data exchange 
apparatus, said data exchange apparatus fur- 
ther comprising; an access control means 
which controls the connection from said termi- 
nals, 

a security control means which judges verifica- 
tion of said terminals with regard to said access 
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11. 



means, a function converting means, which 
converts the services contents of said applica- 
tion services to be supplied to said terminals 
based upon data from said security control 
means into a format suitable for said terminals, 5 
a connection control means, which controls the 
connecting condition of said terminals with said 
data processing apparatus and controls to sup- 
ply the services contents of the data converted 
by said function converting means based upon io 
said connecting condition, 
a first control means for controlling said termi- 
nals so that said terminals are enabled to deci- 
pher specific data, and 

a second control means that executes a verifi- is 
cation process by means of a proper system 
and controls a login process suitable for the ter- 
minals, when said terminals are in connection 
with said data exchange apparatus through a 
network and made a request for an access to 
the specific data by meeting specified condi- 
tions. 

A distributed network computing system as claimed 
in claim 1 , 2, 3, 4, 5, 6, 7, or 8 which is characterized 2S 
in that said access control means controls execu- 
tion of processing by a proper connection control 
system and a programmed control method in the 
terminals. 



10. 



30 

A distributed network computing system as claimed 
in claim 1 , 2, 3, 4, 5, 6, 7, or 8 which is characterized 
in that said security control means comprises an en- 
ciphering processing means by means of a proper 
means, when the application services are supplied 35 
to the terminals. 

A distributed network computing system as claimed 
in claim 1 , 2, 3, 4. 5, 6, 7, or 8 which is characterized 
in that said function converting means comprises 40 



a control means which manages data regarding 
said terminals, 

a means which manages data regarding an in- 
terface with the application services and realiz- 
es a communication with the application serv- 
ices. 



12. 



A distributed network computing system as claimed 
in claim 1,2,3, 4, 5, 6, 7, or 8 which is characterized 
in that said security control means, said access con- 
trol means and said function converting means are 
provided with a unified view regarding the terminals, 
which is accessing, by issuing a new identifier by 
said security control means. 



1 3. A distributed network computing system as claimed 
in claim 1,2.3. 4, 5. 6. 7. or S which is characterized 
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in that said function conversion means is provided 
with a means toconvert the data into the format suit- 
able for said temninals based upon the communica- 
tion system used by said terminals. 

1 4. A distributed network computing system as claimed 
in claim 2, 3, 4, 6, 7, or 8 which is characterized in 
that said connection control means is provided with 
a means to enable the data transmission to contin- 
ue from the interrupted point at the time of break- 
down of the circuit, based upon the record of the 
data conversion by said function conversion means 
and the record of the connecting condition with said 
terminals. 

1 5. A distributed network computing system as claimed 
in claim 3. 4, 7, or 8 which is characterized in that 
said data exchange apparatus is provided with a re- 
mote agent function executing means, while at least 
one of the various kinds of terminals is provided with 
a local agent function as a client, and said data ex- 
change apparatus and said terminals are provided 
with a means to execute a data cache function. 

16. A distributed network computing system as claimed 
in claim 3, 4, 7, or 8 which is characterized in that 
said data exchange apparatus is provided with a ex- 
ecuting means of remote agent function as a server, 
while at least one of the various kinds of terminals 
is provided with a local agent function as a client, 
and said data exchange apparatus and said termi- 
nals are enabled to execute the function of data ex- 
change processing without giving any change in the 
relation of server/client. 

17. A distributed network computing system as claimed 
in claim 3, 4, 7, or 8 which is characterized in that 
said access control means is able to procure data 
regarding the communication record or log data. 

18. A data exchange apparatus which is characterized 
in that said data exchange apparatus comprises; 

an access control means which controls the 
connection process from the terminals which 
exist in a network and receive a supply ot ap- 
plication services, a security control means, 
which judges the verification of said terminals 
regarding the access control means; and 
a function conversion means, which converts 
the contents of the application services into a 
format suitable for the terminals, based upon 
data from the security control means. 

19. A data exchange apparatus comprising; 

an access control means which controls a con- 
nection process from terminals which exist in a 
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network and receive a supply of application 
services, 

a security control means, which judges verifi- 
cation of said terminals regarding the access 
control means: 

a function conversion means, which converts 
the content of the application services into the 
format suitable for the terminals, based upon 
data from the security control means; and 
a connection control means which controls the 
connecting condition of the terminals so as to 
supply the services contents converted by said 
function conversion means based upon said 
connecting condition. 

20. A data exchange apparatus comprising; 

an access control means which controls the 
connection process from terminals which exist 
in a network and receive a supply of application 
services, 

a security control means, which judges verifi- 
cation of said terminals regarding the access 
control means, 

a function conversion means, which converts 
the content of the application services into a for- 
mat suitable for the terminals, based upon data 
from the security control means, 
a connection control means which controls the 
connecting condition with the terminals so as 
to supply the services contents converted by 
said function conversion means based upon 
said connecting condition; and 
a control means to enable the terminals to de- 



mat suitable for the terminals, based upon the 

data from the security control means; 

a connection control means which controls the 

connecting condition with the terminals so as 

to supply the services contents converted by 

said function conversion means based upon 

said connecting condition, 

a control means to enable the terminals to de- 



cipher data regarding a specific data, 
a control means to execute a verification proc- 
ess by means of a proper system and to exe- 
cute login suitable for the terminals by means 
5 of a proper method based upon a result of the 

verification, when said terminals lie in connec- 
tion through said network and make a request 
for an access to a specific data by meeting the 
specified conditions; 

10 

22. A data exchange apparatus claimed in claim 18, 19, 
20 or 21 , which is characterized in that said access 
control means is provided with a control means for 
executing processing by means of a proper connec- 
ts . tion control system and a programmed control sys- 
tem at the terminals. 

23. A data exchange apparatus claimed in claim 18, 19, 
20 or 21 , which is characterized in that said security 

20 control means comprises a means for executing de- 
ciphering by means of a proper method for the ter- 
minals at the time of supplying the application serv- 
ices. 

25 24. A distributed network computing system claimed in 
claim 1 8. 1 9. 20 or 21 , which is characterized in that 
said security control means, said access control 
means and said function converting means are pro- 
vided with a unified view regarding the terminals, 
which is accessing by issuing a new identifier by 
said security control means. 

25. A data exchange apparatus claimed in claim 18, 19, 
20 or 21 , which is characterized in that said function 
conversion means is provided with a means for con- 
trolling the data regarding said terminals; and 
a means to manage the data regarding the interface 
with the application services and to realize a com- 
munication with the application services. 

26. A data exchange apparatus claimed in claim 18. 19, 
20 or 21 , which is characterized in that said function 
conversion means is provided with a means to con- 
vert the data into the format suitable for said termi- 
nals depending upon the communication system 
used by said terminals. 

27. A data exchange apparatus claimed in claim 18, 19, 
20 or 21 . which is characterized in that said function 
conversion means is provided with a means to con- 
vert the data into the format suitable for said termi- 
nals depending upon the communication system 
used by said terminals. 

55 28. A data exchange apparatus claimed in claim 18,19, 
20 or 21 , which is characterized in that at least one 
of the terminals is provided with a local agent func- 
tion and a remote agent function means which en- 



cipher specified data, when said terminals lie in 3S 
connection through said network and said ter- 
minals make a request for an access to a spe- 
cific data by meeting the specified conditions. 

21. A data exchange comprising; 40 

an access control means which controls a con- 
nection process from terminals which exists in 
a network and receive a supply of application 
services, 4S 
a security control means, which judges the ver- 
ification of said terminals regarding the access 
control means; 

a function conversion means, which converts 
the content of the application services into a for- so 
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able data cache function with said ternninals. 

29. A data exchanging device which is claimed in claim 
20 or 21 which is characterized in that said data ex- 
change apparatus is provided with a remote agent s 
function execution means and that one of said var- 
ious terminals is provided with a local agent function 

as a client, so that data exchange processing func- 
tion is enabled without changing the cooperation re- 
lation between said data exchange apparatus and to 
said terminals as the server and the client. 

30. A data exchanging device claimed in claim 20 or 21 
which is characterized in that said access control 
means enables to procure the communication 75 
record data or log data. 

. 31. A data exchange method in a distributed network 
computing system wherein a data processing ap- 
paratus which provides application services such 20 
as various application software, and various kinds 
of terminals which receive application services from 
said data processing apparatus are connected to 
each other by networks, compressing the steps of; 

2S 

controlling a connection process from said ter- 
minals, 

judging verification of the terminals connected 
and the contents of the application services to 
be supplied to said terminals so that they are 30 
converted into a format suitable for the termi- 
nals. 

32. A data exchange method in a distributed network 
computing system wherein a data processing ap- 3S 
paratus which provides application services such 

as various application software, and various kinds 
of terminals which receive application services from 
said data processing apparatus are connected to 
each other by networks, comprising the step of; 40 

controlling connection process from said termi- 
nals, judging verification of the terminals con- 
nected, converting a content of the application 
services to be supplied to said terminals is con- ^5 
verted into the format suitable for the terminals; 
and 

controlling a connecting condition with said ter- 
minal the services contents converted by said 
function conversion means based upon said 5o 
connecting condition may be supplied. 

33. A data exchange method in a distributed network 
computing system wherein a data processing ap- 
paratus which provides application services such -55 
as various application software, and various kinds 

of terminals which receive application sen/ices from 
said data processing apparatus are connected to 



each other by networks, comprising the steps of; 

controlling a connection process from said ter- 
minals, 

judging verification of the connected terminals, 
converting the contents of the application serv- 
ices to be supplied to said terminals into a for- 
mat suitable for the terminals, 
controlling a connecting condition with said ter- 
minals so that the services contents converted 
by said function conversion means based upon 
said connecting condition may be supplied, 
controlling said terminals to decipher specified 
data, 

when said terminals lie in connection through 
the network and said terminals makes a re- 
quest for an access to a specified data by meet- 
irig a specified condition. 

34. A data exchange method In a distributed network 
computing system wherein a data processing ap- 
paratus which provides application services such 
as various application software, and various kinds 
of terminals which receive the application services 
from said data processing apparatus are connected 
each other by networks, comprising the steps of; 

controlling a connection process from said ter- 
minals, 

judging verification of the terminals connected 
converting the contents of the application serv- 
ices to be supplied to said terminals into a for- 
mat suitable for the terminals; 
controlling a connecting condition with said ter- 
minals so that the services content converted 
by said function conversion means based upon 
said connecting condition may be supplied, 
controlling said terminals to decipher specified 
data, 

when said terminals lie in connection through 
the network and said terminals makes a re- 
quest for an access to a specified data by meet- 
ing a specified condition, 
performing the verification process by a proper 
system, and 

controlling a login process so as to meet the 
terminals by means of a proper system based 
upon a result of verification. 

35. A data exchange method in a distributed network 
computing system claimed in claim 31 , 32, 33 or 34, 
which is characterized in that a control is executed 
so that the connection process is performed by 
means of a proper connection control system or a 
programmed control system at the terminals. 

36. A data exchange method in a distributed network 
computing system claimed in claim 31, 32, 33 or 34, 
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which is characterized in that a enciphering process 
is applied to the data by means of a proper system, 
when the application is supplied. 

37. A data exchange method in a distributed network 
computing systenn claimed in claim 31 , 32, 33 or 34. 
which is characterized in that while the data regard- 
ing said terminals are managed, the data regarding 
the interface with the application services are man- 
aged so that the communication with the application 
services is realized. 

38. A data exchange method in a distributed network 
computing system claimed in claim 31 , 32, 33 or 34, 
which is characterized in that the data is converted 
into the format suitable for said terminals based up- 
on the communication system used by said termi- 
nals. 

39. A data exchange method in a distributed network 
computing system claimed in claim 32, 33 or 34, 
which is characterized in that the data transmission 
is enabled to continue from the interrupted point at 
the time of the circuit break-down, based upon the 
record of the data conversion and the record of the 
connecting condition with said terminals. 

40. A data exchange method in a distributed network 
computing system claimed in claim 33 or 34, which 
is characterized in that while at least one of said var- 
ious terminals is provided with a local agent function 
as a client, a remote agent function is provided so 
that the data exchange processing function can be 
performed with said terminals as the server, without 
changing the relation of server/client. 

41. A data exchange method in a distributed network 
computing system claimed in claim 33 or 34, which 
is characterized in that while at least one of said var- 
ious terminals is provided with a local agent function 
as a client, a remote agent function is provided so 
that the data cache function can be executed with 
said terminals. 



and the controlling contents of the application 
services to be supplied to said terminals so as 
to convert into a format suitable for the termi- 
nals. 

44. A memory media readable by a computer, in which 
the program data for the data exchange method in 
the distributed network computing system are 
stored, comprising the step of. 

controlling a connection process from the ter- 
minals connected to said network, 
judging verification of the terminals connected , 
converting the contents of the application serv- 
ices to be supplied to said terminals into a for- 
mat suitable for the terminals, and 
controlling connecting condition with said ter- 
minals so that the services contents of the data 
converted by means of said function conver- 
sion means based upon said connecting con- 
dition may be supplied. 

45. A memory media readable by a computer, in which 
the program data for the data exchange method in 
the distributed network computing system are 
stored, 

comprising the step of; 

controlling a connection process from terminals 
connected to said network, 
judging verification of the terminals connected, 
the content of the application services to be 
supplied to said terminals into a format suitable 
for the terminals, 

controlling the connecting condition with said 
terminals so that the services contents of the 
data converted by means of said function con- 
version means based upon said connecting 
condition may be supplied, and 
controlling said terminals so as to be able to de- 
cipher the specific data, when said terminals lie 
in connecting condition and said terminals 
makes a request for an access to a specific data 
by meeting a specified condition. 



30 



35 



40 



42. A data exchange method in a distributed network 
computing system claimed in claim 33 or 34, which 
is characterized in that the record of communication 
or the log data regarding the accesses can be pro- 
cured. 



lemory media readable by a computer, in which 
program data for the data exchange method in 
the distributed network computing system are 
stored, comprising the step of; 



43. A memory 
the 



controlling a connection process from terminals 

connected to said network, 

judging verification of the terminals connected 



45 



50 



55 



46, A memory media readable by a computer, in which 
the program data tor the data exchange method in 
the distributed network computing system are 
stored, 

comprising the step of; 

controlling a connection process from the ter- 
minals connected to said network, 
judging verification of the connected terminals, 
converting the contents of the application serv- 
ices to be supplied to said terminals into a for- 
mat suitable for the terminals, 
controlling a connecting condition with said ter- 
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minals so that the services content of the data 
converted by means of said function conver- 
sion means based upon said connecting con- 
dition nnay be supplied. 

controlling said temninals is controlled so as to 5 
be able to decipher specific data, and perform- 
ing a verification process by a proper system 
and executing a login process meeting said ter- 
minals by a proper system based upon a result 
of the verification process, when said terminals io 
lie in connecting condition and said terminals 
makes a request for an access to a specific data 
by meeting a specified condition. 

47. A memory media readable by a computer, claimed is 
in claim 43, 44, 45 or 46, which is characterized in 
that it is controlled so that connection is executed 

by a proper connection control systenn. or program- 
mable control system at said terminals. 

20 

48. A memory media readable by a computer, claimed 
in claim 43, 44, 45 or 46, which is characterized in 
that a function to perform an enciphering process 
by means of a proper system is realized at said ter- 
minals, when the application services is supplied. 25 

49. A memory media readable by a computer, claimed 
in claim 43, 44, 45 or 46, which is characterized in 
that, while the data regarding said terminals are 
managed, the data regarding the interface with the 30 
application services are managed and the commu- 
nication with the application services is realized. 

50. A memory media readable by a computer, claimed 

in claim 43, 44 or 46, which is characterized in that. 35 
the data transmission is enabled to continue from 
the point interruption at the time of break-down of 
the circuit, based upon the record of the data con- 
version and the record of the connecting condition. 

40 

51. A memory media readable by a computer, claimed 
in claim 45 or 46, which is characterized in that, a 
remote agent function is realized so that the data 
cache function can be executed with the terminals 
provided with a local agent function. 45 

52. A memory media readable by a computer, claimed 
in claim 45 or 46, which is characterized in that, a 
remote agent function is provided as a server so 
that the data exchange processing function can be 50 
executed as the server without changing the coop- 
erative relation of server/client with the terminals 
provided with a local agent function as a client. 

53. A memory media readable by a computer claimed 55 
in claim 45 or 46, which is characterized in that, the 
record of the communication or log data can be ob- 
tained regarding said access. 
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